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STAKEHOLDER PERSPECTIVES ON PRIOR- 
ITIES FOR THE QUADRENNIAL HOMELAND 
SECURITY REVIEW 


Friday, June 20, 2014 

U.S. House of Representatives, 

Subcommittee on Oversight and Management 

Efficiency, 

Committee on Homeland Security, 

Washington, DC. 

The subcommittee met, pursuant to call, at 9:33 a.m., in Room 
311, Cannon House Office Building, Hon. Jeff Duncan [Chairman 
of the subcommittee] presiding. 

Present: Representatives Duncan, Hudson, Barber, and Payne. 

Mr. Duncan. The Committee on Homeland Security Sub- 
committee on Oversight and Management Efficiency will come to 
order. The purpose of this hearing today is to receive testimony 
from National security stakeholders on their recommendations for 
the Department of Homeland Security’s Quadrennial Homeland Se- 
curity Review. I now recognize myself for an opening statement. 

Our homeland security faces a significant test. From the influx 
of illegal aliens, including 60,000 unaccompanied children over the 
last year — and what we see going on even today in the Southwest 
is alarming — to terrorist threats from Syrian foreign fighters and 
al-Qaeda-affiliated groups wreaking havoc on the Middle East, and 
the continued cyber attacks by China and others, this administra- 
tion has failed to provide a comprehensive strategic vision to secure 
our Nation. 

Mandated by the 9/11 Commission Act of 2007, the Department 
of Homeland Security, or DHS, is required to conduct a Quadren- 
nial Homeland Security Review, or QHSR, every 4 years. 

The purpose of the QHSR is for DHS to assess the state of our 
Nation’s homeland security and determine what steps, if any, are 
needed to shift, or enhance, our strategic focus. The QHSR is 
meant to outline DHS’s mission, and the Department’s vision and 
strategy to effectively implement its mission. While the report was 
released only hours before this hearing, it was due no later than 
December 31, 2013. As a result, it is 6 months late. Although I un- 
derstand part of the delay was due to the need for Secretary John- 
son to review the report, we need a cohesive strategy to combat the 
threats that we face. 

Until we have a focused, achievable, and affordable strategy that 
addresses these threats, this administration is failing its duty to 
lead. Because of the lengthy delay, this Quadrennial Homeland Se- 
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curity Review was also unable to guide the President’s fiscal year 
2015 budget request. With our country over $17 trillion in debt, 
and almost $18 trillion today, it is imperative that we make wise 
and well-informed decisions when it comes to the budget. Unfortu- 
nately, without the timely issuance of the QHSR, DHS lacked the 
strategy necessary to help prioritize and spend taxpayer dollars 
wisely. 

In November 2013, the committee sent a letter to Acting Sec- 
retary Beers recommending that the QHSR focus on areas such as 
border security, cybersecurity, terrorist threats, preparedness, 
transportation security, and management effectiveness. While the 
QHSR mentions most of these areas of interest, it does not address 
these threats posed by other nation-states such as Iran, China, and 
Russia. This is a major omission for a document intended to guide 
how we secure the homeland. Its failure to mention Departmental 
management is also a major weakness. 

Year after year, DHS is ranked at or near the bottom of Federal 
agencies in many public-sector agency performance rankings. For 
this Department to be efficient and effective, proper management 
must be a priority. Highlighting climate change as a homeland se- 
curity issue and not nation-state threats — as I mentioned earlier, 
Iran, China, Russia — or the management of the Department makes 
no sense and it raises questions about the usefulness of this strat- 
egy — climate change. However, most concerning in reviewing the 
QHSR is that there seems to be a lack of aligning resources with 
strategic priorities. 

In the 9/11 Commission Act, it requires DHS to identify the 
budget plan required to provide sufficient resources to successfully 
execute the full range of missions called for in the National home- 
land security strategy. While the QHSR briefly mentions budget 
drivers in general, it does not link specific mission areas to the ac- 
tual budget. The Government Accountability Office reported, after 
the release of the first QHSR, that there was a lack of input from 
9 Federal stakeholders. For this document to be truly effective 
there must be interagency. State, local, and private-sector consulta- 
tion. 

In viewing the list of stakeholder participation, it seems DHS in- 
creased their stakeholder outreach. But it also notes direct engage- 
ment with the Executive Office of the President. DHS’s strategy 
should be objective and fact-based, and I sincerely hope that there 
was no political influence in the development of this document. The 
production of this report should not solely be a box-checking exer- 
cise for the Department. The Nation desperately needs a strategic 
vision to secure our homeland. Time will tell if this document 
meets that need. I look forward to hearing the testimony from our 
stakeholders and hearing their perspectives on the latest QHSR. 

With that, I will now recognize the Ranking Minority Member of 
the subcommittee, the gentleman from Arizona, my friend, Mr. 
Barber, for any statement he may have. 

Mr. Barber. Thank you, Mr. Chairman and thank you to the 
witnesses for being with us today. 

The purpose of the Quadrennial Homeland Security Review, or 
QHSR, is to conduct a comprehensive assessment that outlines the 
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long-term risk, strategy, and priorities for homeland security across 
our Nation. 

Unfortunately, as the Chairman pointed out, the Department did 
not release its report until yesterday, despite the statutory man- 
date that it be delivered no later than December 31, 2013. I am 
very disappointed that it was released late. It makes it hard to con- 
duct a meaningful hearing with so short a time to study the re- 
view. But I am pleased that the report is finally in our hands, and 
that it includes specific strategic priorities for the Department for 
the next 4 years. 

It is now encumbent upon the Department, in coordination with 
its Federal, State, and local partners and other stakeholders, to 
carry out these strategies in an effort to keep our country secure. 
And, I might add, to make sure that we have a way of tracking 
progress, which has been sorely lacking in the Department in so 
many areas. 

For the QHSR to be truly effective, a truly effective guide — one 
that ensures that all Department components are working towards 
the same goals — it is absolutely critical that the strategies the De- 
partment has put on paper in the QHSR actually become programs, 
policies, and budget requirements. 

Although the Department is required by law to be included, 
missing from the QHSR is an assessment of the organizational 
alignment of the Department with a National homeland security 
strategy, including the Department’s organizational structure, 
management systems, budget and accounting systems, human re- 
source systems, procurement systems, and a physical and technical 
infrastructure. These missing elements make it difficult to deter- 
mine whether the Department has the required capabilities to 
achieve the goals established in the QHSR and its ability to link 
its policies to planning, budget, and execution. 

It is also essential that the Department do more to engage stake- 
holders. I represent 1 of 9 Southwest Border districts. The people 
who live and work, have businesses, go to school along that border 
should have a right to have a say in how the Department develops 
its strategies and carries them out. I still — I am waiting to see an 
active and robust effort to engage those stakeholders. I would add, 
the personnel, the boots on the ground have to have their voice to 
make sure that they are helping to form strategies and priorities 
for the future. 

It is a sad commentary — and the Chairman also pointed this 
out — that when there is a review. National review, of all Federal 
agencies, DHS has consistently fallen very low. In fact, typically 19 
out of 19 agencies studied. Then when you look inside the Depart- 
ment, within the Department that — looking at morale of employ- 
ees, the CBP — Customs and Border Protection ranks lowest of all 
the employees of the Department. These must be addressed, these 
issues must be addressed, and should become a priority for the De- 
partment going forward. Morale is essential to effective personnel 
activities. 

The Chairman and I recently co-sponsored H.R. 4228, the DHS 
Acquisition, Accountability, and Efficiency Act, which passed the 
House earlier this morning. This bipartisan bill will, I believe. 
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bring transparency, accountability, and consistency to the Depart- 
ment’s acquisition processes, which have been sorely lacking. 

We have had some outrageous examples of how acquisitions have 
gone wrong. The effective and efficient acquisition of technology 
goods and services will be vital in the Department’s ability to im- 
plement the strategic approaches defined in the QHSR. 

As Ranking Member of the Oversight and Management Effi- 
ciency Subcommittee, I will be joining with my colleagues on both 
sides of the aisle in monitoring the Department’s implementation 
of the strategic priorities laid out in the QHSR to ultimately deter- 
mine its worth. Improving the importance of DHS programs, activi- 
ties, and initiatives is clearly a bipartisan process, a bipartisan pri- 
ority. This committee has shown that time and time again. 

But while the Department is not here today to address our spe- 
cific questions, I do appreciate the willingness of these very impor- 
tant stakeholders and former Department employees to testify 
today. Their insights into the QHSR and the Department’s plan 
forward should serve as a valuable contribution to our oversight, 
and I look forward to hearing from each of you. 

Thank you, Mr. Chairman, and I yield back the balance of my 
time. 

[The statement of Ranking Member Barber follows:] 

Statement of Ranking Member Ron Barber 
June 20, 2014 

The purpose of the Quadrennial Homeland Security Review, or QHSR, is to con- 
duct a comprehensive assessment that outlines the long-term risks, strategy, and 
priorities for homeland security across the Nation. 

Unfortunately, the Department did not release the QHSR until yesterday; despite 
the statutory mandate that it be delivered no later than December 31, 2013. While 
I am disappointed it was released late, I am pleased to see that the report includes 
very specific strategic priorities for the Department for the next 4 years. 

It is now incumbent upon the Department, in coordination with its Federal, State, 
and local partners and other stakeholders, to carry out these strategies in an effort 
to keep our country secure. For the QHSR to be a truly effective guide, one that 
ensures all Department components are working toward the same goals, it is critical 
that the strategies the Department has put on paper in the QHSR actually become 
programs, policies, and budget requirements. 

Although required by law to be included, missing from the QHSR is an assess- 
ment of the organizational alignment of the Department with the National home- 
land security strategy, including the Department’s organizational structure, man- 
agement systems, budget and accounting systems, human resources systems, pro- 
curement systems, and physical and technical infrastructure. 

These missing elements make it difficult to determine whether the Department 
has the required capabilities to achieve the goals established in the QHSR and its 
ability to link its policies to planning, budget, and execution. 

The Chairman and I recently co-sponsored H.R. 4228, the DHS Acquisition Ac- 
countability and Efficiency Act, which passed the House earlier this month. This bi- 
partisan bill will bring transparency, accountability, and consistency to the Depart- 
ment’s acquisitions process. The effective and efficient acquisition of technology, 
goods, and services will be vital in the Department’s ability to implement the stra- 
tegic approaches defined in the QHSR. 

As Ranking Member of the Oversight and Management Efficiency Subcommittee, 
I look forward to monitoring the Department’s implementation of the strategic prior- 
ities laid out in the QHSR to ultimately determine its worth. 

While the Department is not here today to address our specific questions, I do ap- 
preciate the willingness of these very important stakeholders and former Depart- 
ment employees to testify today. 

Their insight into the QHSR and the Department’s plan forward should serve as 
a valuable contribution to our oversight. I look forward to hearing from each of you. 
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Mr. Duncan. I thank the gentleman from Arizona. Other Mem- 
bers of the subcommittee are reminded that opening statements 
may be submitted for the record. 

[The statement of Ranking Member Thompson follows:] 

Statement of Ranking Member Bennie G. Thompson 
June 20, 2014 

Pursuant to the Implementing the Recommendations of the 9/11 Commission Act 
of 2007, every 4 years, the Department of Homeland Security (Department) must 
outline its long-term strategy and priorities for homeland security in the form of a 
Quadrennial Homeland Security Review, or QHSR, which was to be submitted to 
Congress in December 2009, and every 4 years thereafter. 

This is a model that has proven to be helpful for the Department of Defense and 
it was anticipated that the Department, and the Nation as a whole, would equally 
benefit from the Department of Homeland Security’s effort. 

The first QHSR was not timely received and did not satisfy the requirements set 
forth in the statute defining what it must contain. It did, however, serve as a frame- 
work for the second QHSR, which should have been submitted to Congress by De- 
cember 31, 2013. 

Unfortunately, once again, the report was late. The first QHSR was submitted al- 
most 2 months past the statutory deadline; this latest version is almost 6 months 
overdue. 

I appreciate the need for the Department to align the QHSR with the President’s 
budget request, which is released in March and that the transition in Departmental 
leadership also impacted the time line, but, the Department must do better. 

Moreover, one of the fundamental purposes of the QHSR is to inform the budget 
and as a result the budget should align with the priorities set forth in the document. 
Building on this foundation as well, are the programs and policies that are imple- 
mented, which should also align with the strategies laid out in the QHSR. 

For example, although I appreciate the Department’s emphasis on improving our 
biosurveillance capabilities, it is unclear whether and how its strategy will align 
with Federal efforts coordinated by the White House. 

The administration released the National Strategy for Biosurveillance in July 
2012, and an implementation plan was due 120 days later. To date, the implementa- 
tion plan has not been released, and the Department has not been able to tell the 
committee when the implementation plan will be released or what its role will be. 

Accordingly, I will be interested in learning more about the degree to which por- 
tions of the QHSR related to biosurveillance were written in coordination with the 
implementation plan for the National Strategy for Biosurveillance and whether and 
how the Department’s role will change when that document is ultimately released. 

Likewise, there is an entire section devoted to immigration. Yet, unless and until 
we pass Comprehensive Immigration Reform, our system will remain broken. I look 
forward to monitoring how the Department will carry out these and other priorities 
set forth in the document. 

Furthermore, the QHSR process does not and should exist in a vacuum. The 
homeland security enterprise consists of Federal, State, local, and Tribal partners, 
in addition to the private sector. 

I therefore look forward to hearing from the stakeholders present at today’s hear- 
ing to ascertain how those outside of Government were included in the process and 
to obtain their perspective on what the Department has identified as our Nation’s 
priorities over the next 4 years. 

Mr. Duncan. We are pleased to have a distinguished panel of 
witnesses before us today on this topic. Let me remind the wit- 
nesses that their entire written statement will appear in the 
record. I will introduce each of you first, and then recognize you in- 
dividually for your testimony. 

Our first witness today it Mr. Stewart Baker. He is a partner in 
the law office of Steptoe & Johnson in Washington, DC. Mr. Baker 
formerly served as the first assistant secretary for policy at the De- 
partment of Homeland Security. In this role, Mr. Baker led a staff 
of 250 people and was responsible for Department-wide policy anal- 
ysis as well as the Department’s international affairs strategic 
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planning and relationships with law enforcement and public advi- 
sory committees. 

The second witness, Mr. Frank Cilluffo is an assistant vice presi- 
dent at the George Washington University, where he is the director 
of the Homeland Security Policy Institute. The institute is a non- 
partisan think tank that focuses on counterterrorism and counter- 
radicalization efforts, cyber threats and deterrence in the nexus be- 
tween crime and terrorism. He also joined the faculty at George 
Washington University in 2003 from the White House, where he 
served as special assistant to the President for homeland security. 

Dr. Henry Willis is the director of the Rand Homeland Security 
and Defense Center, and a professor at the Pardee Rand Graduate 
School. Dr. Willis has applied risk analysis tools to resource alloca- 
tion and risk-management decisions in the area of public health 
and emergency preparedness, homeland and National security pol- 
icy, energy and environmental policy, and transportation planning. 
Dr. Willis’ recent research involved assessing the cost and benefits 
of terrorism security measures like the Western Hemisphere Travel 
Initiative and evaluating the impact of public health emergency 
preparedness grant programs. 

The Honorable Elaine Duke is the former under secretary for 
management at the Department of Homeland Security, a position 
she held from 2008 until 2010. As the under secretary, she was re- 
sponsible for the management of the Department’s $47 billion 
budget, acted as the Department’s chief acquisition officer, and led 
DHS’s $17 billion acquisition program. Prior to her appointment as 
under secretary, Ms. Duke served in a number of positions at the 
Department, including deputy under secretary for management, 
chief procurement officer, deputy assistant administrator of acqui- 
sitions at the Transportation Security Administration. 

So I thank all of you for being here today. I look forward to delv- 
ing into this topic. 

I will now recognize Mr. Baker for your testimony, 5 minutes. 

STATEMENT OF STEWART A. BAKER, FORMER ASSISTANT SEC- 
RETARY FOR POLICY, U.S. DEPARTMENT OF HOMELAND SE- 
CURITY 

Mr. Baker. Thank you. Chairman Duncan and Ranking Member 
Barber. It is really a pleasure to be here. I vividly remember 
launching the first QHSR in the waning days of the Bush adminis- 
tration with a meeting that included outside stakeholders, such as 
Randy Beers when he was in private life. 

Effective management of the Department, achieving its goals, 
protecting us from terrorism and the other goals that have been set 
here is not a partisan exercise. Everyone wants the Department to 
be well-managed and effective in achieving its goals. 

So I am pleased to talk about the second QHSR. There are sev- 
eral things that I think are praiseworthy about it. It clearly is now 
an institutionalized part of the Department’s planning, and that is 
important. The QDR has been a valuable planning and manage- 
ment tool for the Defense Department, and the QHSR, if it con- 
tinues to improve, can be the same for the Department of Home- 
land Security. 
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It stresses, the second report, the continuity of the objectives that 
the Department has. They have not significantly changed at the 
top level. I do not think they would significantly change under a 
different party or a different President. These are the goals that 
DHS is set up to achieve. 

In addition, I would say that this report is better than the last. 
It is, in particular, a very thoughtful addressing of the challenges 
of terrorism, particularly nuclear, biological, and deserves to be 
praised for looking hard and making some difficult choices with re- 
spect to how to carry out the counterterrorism mission. 

That said, there are certainly areas where significant improve- 
ment is required. It is always a temptation in producing reports, 
particularly reports that have been required by Congress, to move 
from looking out the windshield and using this tool to guide the 
Department to just looking in the review mirror and telling us 
what you see behind the Department. 

That is easier because it is really — it is more of a speech than 
a decision-making process. There are elements of speechifying in 
this QHSR. If you look at the QDR and the Secretary’s letter, the 
first sentence talks about the tough choices that the QDR makes. 
I don’t see as many tough choices being made in this QHSR. It is 
a little bit more a description of a strategy. Until that strategy ac- 
tually bites and produces tough budget decisions, it is not easy to 
say that it is really a strategy. I think more needs to be done in 
translating the QHSR into actual budget decisions. 

There is also, frankly, a temptation on the part of other agencies 
or other stakeholders to say, well, if you are writing a speech be 
sure to name-check me. Or maybe I would like to have a turf fight. 
Since you have to get this out, I will hold it up until you give me 
some turf concessions. There is some reason to believe that this 
may have happened with the Department of Justice demanding 
name checks for all of its roles in areas where its legislative or 
statutory authority is a little dubious. That is unfortunate; the idea 
that a DHS strategy would be held hostage by other agencies 
strikes me as inappropriate. 

More specifically, I would say the things that I found dis- 
appointing about the content of the report — I thought the cyber dis- 
cussion was only adequate, not particularly strategic. The adver- 
tisement for immigration reform, we understand that that is a leg- 
islative proposal that the administration feels very strongly about. 
But we don’t know whether it will pass, and it is hard to plan for 
something that has such a questionable future on the Hill. Intro- 
ducing it into the QHSR is open to some question, particularly be- 
cause I don’t think the report acknowledges just how tough a man- 
agement challenge that will be. It will be an enormous manage- 
ment challenge. 

The Department should be planning for that challenge because 
of the possibility that we will get significant reforms. I did not see 
as much discussion of that challenge as was appropriate. Finally, 
I could not agree more with the remarks of both Congressmen 
about the deleterious effects of delay here. That makes it hard for 
this to have an impact. If it doesn’t have an impact it is just a 
speech. It needs, the Department needs, more centralized manage- 
ment for sure. 
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This could be an enormously valuable tool as part of a strength- 
ening of overall management. I would certainly support anything 
that achieved that goal. 

[The prepared statement of Mr. Baker follows:] 

Prepared Statement of Stewart A. Baker 
June 20, 2014 

Chairman Duncan, Ranking Member Barber, Members of the subcommittee, I am 
honored to testify before you today about the Department of Homeland Security’s 
Quadrennial Homeland Security Review (QHSR). During my time as assistant sec- 
retary for policy at DHS, 1 was involved in launching the QHSR, as well as what 
was then known as the Office of Strategic Plans. As you can imagine I am a strong 
supporter of coordinated strategic planning in general, and of the QHSR in par- 
ticular. 

Our goal in starting the QHSR was to create a mechanism for the Secretary to 
articulate a unified set of strategies and priorities for protecting U.S. homeland se- 
curity. We believed that by forcing ourselves to think strategically about the range 
of threats to the Nation and the tools available to the Department, we could create 
a unified set of priorities that could guide the components of the Department with- 
out the need for constant personal attention from the Secretary and Deputy Sec- 
retary. We also hoped that doing so would make for a better budget process, one 
in which some of the goals and trade-offs had already been clarified, so that budg- 
eting was a matter of matching limited resources to an agreed set of priorities. We 
hoped, in short, that some of the hard choices then driven by annual budget exer- 
cises could be made with a longer perspective across all parts of the Department. 

Since its inception, DHS has suffered from a lack of unity between its compo- 
nents. In many ways this is unsurprising. As you all know, the Department was 
created from the combination of several different entities, most of which brought 
with them a fully formed set of ideas about how to best go about protecting the Na- 
tion. Reconciling these diverse missions into something resembling a coherent set 
of policy goals was always going to be a challenge, even under the best of cir- 
cumstances. The Department has benefited tremendously over the years from strong 
leadership, and when the Secretary brought personal focus to the task, the Depart- 
ment responded with unity and focus. But without that personal involvement it has 
been hard to maintain mission unity among the Department’s components. 

Unity has only grown more important in an era of evolving threats. The original 
impetus for creating DHS was to better coordinate the various entities responsible 
for protecting the Nation against terrorism. In certain ways this reorganization has 
been tremendously successful. America’s enemies have been unable to replicate the 
destruction of 9/11 within the United States, and DHS deserves great credit for the 
role it has played in thwarting many post-9/11 plots. But terrorism today is a more 
dynamic threat than it was 10 or 15 years ago. The advances in communications 
technology since 2001 alone have fundamentally altered the ability of terrorists to 
recruit. Both inside and outside of the United States, as well as to coordinate at- 
tacks. This is not to mention, of course, the many other threats beyond terrorism 
that the Department must guard against. Some of these threats are new or evolv- 
ing. For instance, our increasing reliance on network technology has made us more 
vulnerable to cyber attacks. A hacker can today cause a level of damage from his 
living room that would have been inconceivable as recently as 10 years ago. Others 
are as old as the planet, as Hurricane Katrina reminded us nearly 10 years ago. 

The QHSR is thus a mechanism for DHS to think carefully about the full range 
of threats it faces, and to prioritize them accordingly. In a world of unlimited re- 
sources this would be less important. But that is not the world we live in. We have 
settled into an extended period of austerity for the Department, and cuts to its 
budget remain a real possibility in the immediate future. Given that DHS cannot 
treat every threat equally, it is therefore even more imperative that the Secretary 
be able to prioritize threats and coordinate the Department’s resources accordingly. 
This is what we hoped the QHSR would facilitate. 

grading the 2014 QHSR 

DHS issued the first QHSR in 2010. The final product was, in my opinion, a good 
first statement of the Department’s priorities. Having analyzed the range of short- 
and long-term threats to the United States in light of the Department’s responsibil- 
ities, it synthesized these priorities into five core missions: Counterterrorism, border 
security, immigration enforcement, cybersecurity, and resilience to natural disasters 
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and attacks. I imagine you are all familiar with the previous report so I will not 
spend much time discussing its details, other than to say that it was, in my mind, 
an effective articulation of where the Department’s overarching focus should be. 

Thankfully, substantial progress has been made since the inaugural QHSR. The 
second report is better, more detailed and far-reaching in scope. It maintains the 
previous QHSR’s five core DHS missions essentially unchanged, but it goes signifi- 
cantly further in analyzing the dynamic risks and challenges we face within these 
core areas. It is a more detailed statement of the principles that should guide indi- 
vidual decision making within the core framework. And it is a more comprehensive 
forecast of potential future threats to our homeland. 

This is not to say that the report is perfect. From my perspective, it is not clear 
that areas like cybersecurity or nuclear terrorism were approached with the same 
level of care as other forms of terrorism. With respect to cybersecurity, the 2014 
QHSR has little new to say about the need to recruit and develop a skilled cyberse- 
curity workforce, for instance. It also does not appropriately prioritize the impor- 
tance of protecting critical U.S. infrastructure from espionage. To be sure, there are 
parts of the QHSR that need work. Nonetheless, on balance the report is an im- 
provement over its predecessor. 

These improvements are not surprising to me, since this year’s report has bene- 
fited from a consolidated Strategic Planning and Risk Analysis department (SPAR). 
As I am sure you are aware, DHS combined the Offices of Strategic Plans and Risk 
Management in 2012 into a single group. This was a good idea; the combination has 
resulted in a more methodical, efficient analysis of the relevant data. The 2014 
QHSR is also the result of substantially more cooperation between DHS and stake- 
holders, both public and private. Accordingly, it is a more complete description of 
the broad range of threats we face in the United States, based on a wider range 
of perspectives. 

The quality of this year’s report is surely the product of the tremendous profes- 
sionals in the Department. This begins with Secretary Jeh Johnson’s stewardship. 
It is clear that Secretary Johnson sees the value of strategic planning for the De- 
partment. Although still relatively new to DHS, he wasted no time in quickly mak- 
ing the QHSR his own, apparently redrafting portions of it to better bring them into 
alignment with his vision. The result is a clear statement of his and the Depart- 
ment’s priorities. 

More generally, I have been pleased to see that Secretary Johnson is also com- 
mitted to unifying the Department’s components into something, in his words, great- 
er than the sum of its parts. The “Unity of Effort” memo he sent to the Depart- 
ment’s leadership in April of this year is a good example of his commitment to em- 
brace strategic thinking beyond what is mandated by the QHSR. 

I suppose it didn’t hurt that Secretary Johnson was able to see how much those 
of us involved in starting the QHSR cribbed from the Defense Department’s Quad- 
rennial Defense Review (“QDR”). Like DHS, DoD is a group of proud, independent 
components with often divergent traditions and missions. Yet, DoD has often suc- 
ceeded in fostering a larger sense of unity where DHS has not. Obviously, this is 
due in part to DoD simply having been around longer. DHS is, after all, barely 10 
years old. When DoD was older than that, the Secretary of Defense reportedly asked 
the Navy during the missile crisis how the embargo of Cuba would be carried out; 
he was reportedly told that it would be done in accordance with Navy tradition and 
international law, and that he could retire to his quarters, secure in the knowledge 
that the Navy would call for his advice if and when the Navy thought that was nec- 
essary. I am confident that DHS is past that point in its drive for unity. 

And so of course is DOD. We looked to the QDR as an exemplary strategic plan- 
ning exercise that played an important part in fostering a culture of unity within 
DoD — an influence Secretary Johnson has correctly reinforced. 

I would also be remiss if I did not mention Alan Cohn, assistant secretary for 
strategy, planning, analysis & risk. Assistant Secretary Cohn has led the QHSR 
process for both the 2010 and 2014 editions. His hard work and ability to find con- 
sensus is one of the principal reasons the current report is as good as it is. The only 
real credit I can take for the QHSR as it stands today stems from the fact that I 
had the wisdom to hire and then promote Assistant Secretary Cohn. I am happy 
I did — he has made me look brilliant ever since (and he, at least, knows how hard 
that is). Without question, he has turned out to be one of the important career tal- 
ents for the Department in this area. 
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BRINGING THE DEPARTMENT’S BUDGET INTO ALIGNMENT WITH THE QHSR’S STATEMENT 

OF PRIORITIES 

As I mentioned before, the 2010 QHSR did a fine job stating the Department’s 
priorities. It was less effective, however, at actually linking the budget up with 
these priorities. From the perspective of 2014, we can look back and see clearly that, 
in practice, the allocation of money within the Department did not end up tracking 
the QHSR all that closely. We can chalk that up, perhaps, to the learning curve, 
but we should expect the second QHSR to have a greater influence on funding deci- 
sions inside the Department. 

But there are more fundamental issues with the way money is allocated within 
DHS that make it difficult for the Secretary to bring DHS’s budget into alignment 
with his priorities as they are described in the QHSR. These issues need to be ad- 
dressed if the report is to ever approach the level of efficacy we hoped it would have. 
For an agency like DHS, which is mainly in the business of execution rather than 
oversight, funding is everything. Compare DHS with oversight agencies like the En- 
vironmental Protection Agency, whose primary function is writing rules for others 
to follow. While those agencies obviously need to keep the lights on, their ability 
to perform their mandate is less tied to appropriations and more to the legislative 
authority they receive. DHS, in contrast, is far more often in the business of execu- 
tion rather than oversight. Most of its missions are carried out directly. When you 
cross a border you are met by DHS employees. The same is true if you are lost at 
sea and need rescue, are boarding an airplane, or are caught counterfeiting funds 
or illegally immigrating into the United States. 

How — and how well — DHS does these jobs depends largely on how it allocates its 
budget. Thus, while strategic planning exercises like the QHSR are useful in their 
own right, they can easily become sterile exercises if no one believes they will actu- 
ally drive budgetary decisions. Make no mistake about it, a statement of the Depart- 
ment’s priorities, no matter how lucid, will ultimately ring hollow if the priorities 
are not honored when budget decisions are made. 

RECOMMENDATIONS MOVING FORWARD 

This is not to say that the QHSR should be a holy writ that determines budgetary 
allocations for an entire 4-year period. It should not be, and it will at times be nec- 
essary to deviate from the script in order for the Department to be able to effectively 
respond to the dynamic range of challenges it is sure to face. While long-term 
strategizing is vital, so too is making sure that the Secretary and the components 
within DHS can fluidly make decisions to respond to threats as they emerge. The 
QHSR is not a substitute for judgment. Instead, the report is what I would call an 
auto-pilot. It is a mechanism for individuals within DHS to understand how to carry 
out their jobs unless and until they know the Secretary has reconsidered. And it 
is a way to make sure the Secretary can be confident that those within the Depart- 
ment are following his objectives, even when he is not personally overseeing them. 

Finally, one other issue I would like to briefly address is the degree to which the 
Department of Justice has been given a near veto over the QHSR, presumably by 
the Office of Management and Budget. I simply do not understand how it is that 
DHS’s strategic plan can be delayed by an agency that has no skin in the game. 
There is no reason to allow the QHSR to be delayed for so long, particularly at the 
instance of another Cabinet department. 

Mr. Duncan. Thank you for your testimony. 

I will recognize Frank next. Pronounce your name for me. 

STATEMENT OF FRANK J. CILLUFFO, ASSOCIATE VICE PRESI- 
DENT AND DIRECTOR, HOMELAND SECURITY POLICY INSTI- 
TUTE, THE GEORGE WASHINGTON UNIVERSITY 

Mr. CiLLUFFO. SIH-LU-FO. 

Mr. Duncan. Thank you so much. You are recognized for 5 min- 
utes. 

Mr. CiLLUFFO. Thank you, Chairman Duncan, and Ranking 
Member Barber, Congressman Payne, thanks for the opportunity to 
join you today. I think you guys hit it out of the park in terms of 
your opening remarks. I think you captured a lot of what a lot of 
us are struggling and thinking about in terms of the QHSR in 
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terms of its strengths and in terms of its weaknesses. There is 
nothing I disagree with my good friend and long-time co-con- 
spirator, Stewart Baker. 

But I thought I would maybe pick up on a couple of points that 
haven’t been raised. First, talk a little bit about the threat, and 
then maybe focus on some of the recommendations. 

I think it is important to recognize that the QHSR does come at 
a time of incredibly significant international instability. I think 
there is a feeling that we are in a safe place. The reality is, if you 
were to close your eyes and point to a place on the map, I can tell 
you, or we can tell you, what some of the challenges and concerns 
are. They are varied and they are many, and they come in various 
shapes, sizes, flavors, and forms. 

I think Mr. Duncan, you were spot-on to highlight the growing 
nature of state-sponsored terrorism, which is back. Whether it is 
the government of Iran in support of Hezbollah, or some of the 
Shia militias, or others, others are turning to proxies, as well. If 
you just look at what played out in Crimea vis-a-vis Russia, you 
have a role of proxies. You see that in a very strong form vis-a-vis 
cyber, where everyone is turning to proxies to do their bidding. In 
terms of the non-state Islamist threat, though, we have got prob- 
lems on our hands. 

At the end of the day, you have got broad swaths of territory and 
ungoverned spaces that are providing and affording our enemies 
the time and space to plan and execute attacks. Obviously, when 
we look at Iraq in the past couple of days, it is incredibly dis- 
concerting that some of the hard-earned gains both in terms of 
treasure but, more importantly, in terms of lives of our men and 
women in uniform are being rolled back. That is — that is unaccept- 
able. 

Why Yemen, why Iraq, why the Sahel, the Magreb, which are 
broad swaths of territory — why are these concerns? They are 
ungoverned spaces and they are under-governed, where the author- 
ity — where nations have been usurped by those that have more 
hostile aims. 

For awhile there, we were applying enough pressure that they 
were spending more time looking over their shoulder and less time 
plotting and executing attacks. This is a big concern, and it does 
have ramifications in terms of our next steps in Afghanistan. 

Moreover, you are seeing advances in technology that have in- 
creased the lethality of weapons, targeting systems, and means of 
communication used by terrorists. New and powerful avenues of re- 
cruitment and radicalization have opened up, notably through so- 
cial media. I might note, even in terms of ISIS in Iraq, they now 
are coming out with propaganda very similar to al-Qaeda in the 
Arabian Peninsula’s Inspire magazine, in English, and clearly tar- 
geting, and aimed at. Westerners, including Americans. 

And why is Syria and the foreign fighter flow you are seeing spill 
into Iraq of such concern? We are talking over 70 countries — 3,000 
Westerners, including over 70 Americans. At some point they re- 
turn. What makes Syria unique is that unlike the foreign fighter 
flows we have seen in the past — whether in the AfPak region or in 
Yemen or in Somalia — they were primarily focused on a single di- 
aspora. 
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What you are seeing in Syria is flocking from all over the world. 
At some point, you are gonna see new networks. You are gonna see 
Yemenis who have bomb-making experience meeting up with Brits 
who have social media experience. It is these new networks that 
I think are going to be of significant concern. 

Don’t think for a minute that al-Qaeda isn’t doing talent-spotting 
on the battlefield and identifying individuals that they will turn 
back to the West. This is a big concern. That is why foreign fight- 
ers, I think, are especially significant. 

In terms of the cyber threat, I do feel this is — when you look at 
the homeland, you can attack the United States without ever step- 
ping foot in the country. At the high end of the threat spectrum, 
we are obviously talking about nation-states: China, Russia, Iran, 
North Korea. Some are engaged primarily in espionage, others are 
engaged in more computer network attack, or attacking our sys- 
tems. 

Again, the role that proxies play is quite significant here. Be- 
cause who is behind that clickety-clack of the keyboard? Anonym- 
ity; attribution is very difficult to discern in cyber space. So I think 
a lot more there. I think as you start seeing the internet of things, 
where physical and cyber converge, you are going to see new threat 
vectors. I think one thing the Department deserves some credit on 
is recognizing the convergence of physical and cyber threats in the 
QHSR. 

Bottom line on the QHSR, as Stewart said, we don’t — I think we 
are all tired of speeches. At the end of the day, unless the QHSR 
has bite and can be aligned to budget planning and budget proc- 
esses, which it didn’t do the first go-around, it is merely rhetoric. 
Policy without resources is rhetoric. 

We do have to make tough decisions. In the words of President 
Eisenhower, we actually need security and we need solvency. I 
think that is what we are struggling with here, is the need to be 
able to make some of those tough decisions, get the greatest return 
on our investment, and get the most bang for our buck. Doesn’t do 
that thus far. 

One thing I want to just highlight as I close is, I give you props 
and kudos for passing the acquisition legislation. I think there is 
a lot you can do using that model to keep your oversight functions 
moving, as well, in terms of some of the policy deliberations. We 
do need to elevate the Office of Policy to an under secretary. That 
will give you more oversight function. I think the committee itself 
can play a more significant role with authorization bills that can 
align to some of the budget-making. 

So, Mr. Chairman, thank you for the opportunity to join you. 

[The prepared statement of Mr. Cilluffo follows:] 

Prepared Statement of Frank J. Cilluffo 
June 20, 2014 

INTRODUCTION 

Chairman Duncan, Ranking Member Barber, and distinguished Members of the 
subcommittee, thank you for the opportunity to testify before you today. 

The Department of Homeland Security has now completed its second Quadrennial 
Homeland Security Review (QHSR), and is expected to issue its report to Congress 
on the results of this review shortly. My testimony today will comment on key 
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issues addressed in a draft version of the report, beginning with general remarks 
and then focusing on what I believe are the two most critical threats facing the 
homeland today: Terrorism threats and cyber-related threats. 

This QHSR comes at a time of significant international instability. Although our 
homeland security posture has improved substantially in the last decade-plus, the 
terrorist threat climate in which the United States finds itself today is in many 
ways reminiscent of that prior to 9/11, sharing a number of similar attributes and 
characteristics. The current climate is also one marked by budget cuts as well as 
the roll-back of hard-earned gains that had been achieved through the investment 
of billions of dollars and, most importantly, the lives of thousands of our men and 
women in uniform. 

Against this background, it is all the more disconcerting to see that in Iraq and 
Syria, terrorist groups have found space and time in which to maneuver, plot, and 
execute attacks; all while U.S. forces prepare to draw down in Afghanistan. In Afri- 
ca, we see a constellation of active and skilled terrorist groups in the Maghreb and 
Sahel, from Boko Haram in Nigeria, to al-Qaeda in the Arabian Peninsula (AQAP) 
in Yemen, to Ansar al-Sharia in Libya, to Ansar al-Dine in Mali, to al-Shabaab in 
Somalia. At the same time, advances in technology have increased the lethality of 
weapons, targeting systems and means of communications used by terrorists. New 
and powerful avenues of recruitment and radicalization have opened up, notably 
through social media. These tools have in effect shrunk the globe as young, tech- 
savvy, and like-minded extremists are connecting in the dark corners of the web — 
as evidenced by the swell of foreign fighters flocking to Syria. As a result, what hap- 
pens overseas has significant domestic implications, including with respect to home- 
grown violent Islamist extremism. 

In addition to the Islamist threat posed by terrorism, the cyber domain is a per- 
missive environment, which is made for plausible deniability, for a wide range of 
U.S. adversaries who need never set foot in this country in order to do us harm. 
Our political, military, and economic secrets including our intellectual property are 
being siphoned out covertly by cyber means, specifically computer network exploi- 
tation (ONE). From ONE — to include mapping of our critical infrastructure systems, 
to computer network attack, to cyber crime perpetrated by forces whose capabilities 
have grown to such an extent that some of these criminal groups are now even on 
par with some nation-states’ abilities and capacities, the range of activities and ac- 
tors with hostile intent is both wide and deep. Nation-states are investing in and 
building up their cyber war capabilities, as well as integrating these capacities into 
their broader war-fighting doctrine and operations. Moreover, nation-states are 
making use of proxies for both physical and cyber attacks. In these regards, China, 
Iran, North Korea, and Russia are of abiding concern. 

The ecosystem of threats facing DHS and the homeland is thus varied and seri- 
ously challenging. From physical threats to cyber threats, and the nexus between 
the two, DHS and the Nation must stand ready and prepared for the full gamut 
of these scenarios. We must position ourselves to be as nimble in prevention and 
response as is required to meet whatever variant or form in which the threat of 
today and tomorrow manifests. 


OVERVIEW OF THE QHSR 

Congress established the Quadrennial Homeland Security Review in law in 2007 
as a mechanism to focus senior leadership attention at DHS on long-term strategic 
issues, enhance the strategic planning processes within the Department, and then 
ultimately to “strengthen the linkages between strategy and execution”,^ particu- 
larly with respect to the Department’s operational requirements and budget deci- 
sions. 

The first QHSR report, released at the end of 2009, played a valuable role with 
respect to defining the strategic priorities of the Department, but did not have a sig- 
nificant impact in terms of implementation. Very few of the initiatives outlined in 
the follow-on “Bottom-Up Review” were ultimately implemented, and the QHSR did 
not appear to have a major impact on successive budget requests within DHS. 

This second QHSR has built on the positive and negative lessons of the first re- 
view, and the activities that informed the review have matured in the past 4 years. 
Overall, the strategic framework defined within the report is robust, and reflects 
hard choices about which issues are of greatest priority to the Department. Notably, 
it calls out biological threats as a significant homeland security priority — an area 
that I believe has received insufficient attention by policy makers in the last few 


1 Quoted from page 403 of H.R. 110-259, House-Senate Conference Report for the Implementing 
Recommendations of the 9(11 Commission Act of 2007, July 25, 2007. 
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years, but which is likely to represent the greatest long-run catastrophic terrorist 
threat that we face.^ 

But the real verdict on this QHSR will come in the months and years ahead. It 
is imperative that this QHSR is used to inform key strategic decisions in the next 
4 years, starting with the fiscal year 2016 budget request to Congress that will be 
released next February. As the primary House authorizing committee for DHS, this 
committee has the opportunity in the next 4 years to hold the Department account- 
able for implementing the strategic priorities outlined in this review. 

I should note here that it is refreshing that Secretary Johnson and his leadership 
team are taking these strategic issues seriously, particularly with respect to the 
“Unity of Effort” initiative that is underway within the Department, as outlined in 
a memorandum by Secretary Johnson sent to his senior leadership team in April 
of this year.3 The issues raised by the Secretary in this memorandum are critical, 
particularly with respect to the integration and effectiveness of policy, management, 
and operational activities within the Department. I would urge the committee to 
consider legislation that strengthens key offices — such as the Office of Policy, which 
has never been authorized in statute — and holds DHS accountable for making 
progress on these “Unity of Effort” objectives, along the lines of what you have al- 
ready done with the recently-passed legislation on DHS acquisition. I should also 
note that the Homeland Security Policy Institute is forming a task force that will 
take an independent look at these “Unity of Effort” issues, and we look forward to 
engaging further with the committee on this in the months ahead. 

For the remainder of my testimony, I will focus on two of the five top-level home- 
land security missions defined within the QHSR framework: Preventing terrorism 
and addressing cyber threats. While my remarks center on these two areas, I would 
emphasize that we must also remain focused on other important DHS missions, to 
include emergency preparedness and disaster response, and the task of securing the 
Nation’s borders. 


PREVENTING TERRORISM 

The terrorist attacks and atrocities within the past week in Iraq by ISIS (the Is- 
lamic State in Iraq and Syria), in Kenya by al-Shabaab, and in Nigeria by Boko 
Haram are stark reminders of the persistent Islamist terrorist threat, not only in 
the region, but also with respect to the threat of attacks against the homeland. They 
are also an example of the increasing fragmentation and diversification of terrorist 
threats; as the introduction to the draft QHSR report notes, “the terrorist threat is 
increasingly decentralized and may be harder to detect.” 

Of particular concern is the foreign fighter threat in Syria, which is now also spill- 
ing over into Iraq; indeed, I would argue that the two conflicts are merging into a 
single regional insurgency. In Syria, we have seen the on-going civil war become a 
magnet for foreign fighters from no less than 74 countries around the world.’' Up 
to 3,000 Westerners have traveled to fight in Syria since the conflict began, includ- 
ing more than 70 Americans.® Disturbingly, the Syrian conflict has given rise to new 
networks and new connections. For example, bomb makers are meeting up with in- 
dividuals who are well-versed in media, especially social media. Armed with 
Kalashnikovs, laptops, and cell phones, foreign fighters are thus amassing and 
emerging with new and blended skill-sets and expertise, including potentially exper- 
tise with chemical weapons. 

Within the past month, we have begun to see examples of the global implications 
of this foreign fighter threat. In late May, a French national and former Syrian for- 
eign fighter committed a terrorist attack at a Jewish museum in Brussels, Belgium, 
killing 4 people. The United Kingdom and Spain both made high-profile arrests of 
individuals recently who had traveled to Syria to fight or who were involved in fa- 
cilitating such travel. And an American citizen from Florida who was fighting in 
Syria carried out a suicide truck bombing attack in late May. ISIS is now issuing 
English-language propaganda, similar in nature to al-Qaeda in the Arabian Penin- 


2 See for example Nathan Myhrvold, Strategic Terrorism: A Call to Action, The Lawfare Re- 
search Paper Series, Research Paper No. 2 — 2013 (July 2013 Working Draft) http: ! j 
fortunedotcom.files.wordpress.com ! 2013 ! 10 ! strategic-terrorism-myhrvold-7-3-2013.pdf . 

^Memo available at: http: 1 1 www.hlswatch.com I wp-content I uploads 1 2014/ 04/ DHSUnity- 
OfEffort.pdf. 

’'Aaron Y. Zelin, “Up to 11,000 foreign fighters in Syria; steep rise among Western Euro- 
peans,” The International Centre for the Study of Radicalisation (ICSR) — Insight (Dec. 17, 
2013), http: / / icsr.info /2013 / 12/ icsr -insight- 1 1 GOO-foreign-fighters-syria-steep-rise-among-west- 
ern-europeans / . 

®Kimiko De Freytas-Tamura, “Foreign Jihadis Fighting in Syria Pose Risk in West,” New 
York Times (May 29, 2014), http://www.nytimes.eom/2014/05/30/world/middleeast/foreign- 
jihadis-fighting-in-syria-pose-risk-m-west.html. 
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sula’s Inspire magazine.® These examples are likely to be leading indicators of a di- 
rect terrorist threat that the United States and other Western nations will face in 
the months and years ahead. 

Countering the challenge posed by foreign fighters must therefore be a priority 
mission for DHS, and not just conceptually. The Department of Homeland Security 
already plays an important role in one way in mitigating potential threats to the 
homeland from Syrian foreign fighters: Its activities to detect and prevent terrorist 
travel and entry into the United States. It is critical that key activities related to 
terrorist travel — at CBP, TSA, ICE, US-VISIT, and the Office of Intelligence and 
Analysis — are maintained and strengthened even in this difficult budget environ- 
ment for the Department. 

Another key responsibility for DHS (along with the FBI, National Counterter- 
rorism Center, the State Department and other agencies) has been less well-devel- 
oped: Countering the ideologies of violent Islamist extremism (“CVIE”) that 
radicalize individuals and replenish the ranks of our terrorist adversaries. This is 
the biggest missing dimension of U.S. counterterrorism statecraft to date. The State 
Department’s Center for Strategic Counterterrorism Communications is doing some 
good work overseas in this area in foreign languages, but very little is being done 
domestically. A systematic strategic communications effort is needed, aimed at ex- 
posing the hypocrisy of our adversaries’ words versus their deeds. The goal is to 
knock terrorist groups off-balance; embarrass their leadership by bringing to light 
their seamy connections to criminal enterprises and drug trafficking organizations; 
and broker infighting among al-Qaeda, its affiliates, and the broader jihadi orbit in 
which they reside — which will damage violent extremists’ capability to propagate 
their message and organize operations.^ Again, it is crucial to link priorities with 
budgets. A former senior White House official. Quintan Wiktorowicz, recognizes as 
much in recent commentary that emphasizes the need for a dedicated CVIE budget: 
“It is Time to Fund Domestic Counter-Radicalization.”® The piece makes several 
solid points, including the need to invoke community engagement in this effort. 
While that is part of the equation, however, CVIE also needs to support the pointier 
end of operational counterterrorism efforts. Federally and at the State and local 
level. 

The current conflict in Syria and Iraq is symptomatic of a broader concern: The 
circumstance of ungoverned or under-governed spaces that provide our adversaries 
with the time and space needed to recruit, train, and plot. Instead of being back 
on their heels, looking over their shoulders, our adversaries are benefiting from con- 
ditions that provide them with a level of freedom of action that they have not expe- 
rienced in recent history. Note that ungoverned and under-governed spaces do not 
need be geographically vast in order to facilitate terrorist activity; under-governed 
neighborhoods in large cities in countries such as Pakistan, Kenya, and Nigeria can 
also provide a form of safe haven to terrorist groups. Urban environments also serve 
to limit U.S. military options. To further cement the dilemma, these developments 
are taking place when our intelligence collection platforms are becoming fewer and 
perhaps less effective than in the past, due to the draw-down of American forces 
in Afghanistan and Iraq and due to the damaging revelations of critical U.S. intel- 
ligence collection activities in the past year. 

For all of these reasons, the terrorist threat to the homeland is becoming increas- 
ingly grave, and it is critical that DHS and its Federal, State, and local partners 
remain focused on detecting and countering these threats in the months and years 
ahead. As threats evolve, DHS also needs to be agile and continuously evaluate the 
effectiveness of its various activities in countering such threats, and invest in new 
tools and capabilities to address emerging threats. This committee can play a sig- 
nificant role in ensuring that the Department does not succumb to inertia and is 
focused on anticipating and addressing such emerging threats. 

CYBERSECURITY 

The rapid growth in cyber-related threats in the last few years has led some sen- 
ior Government officials to assert that cyber threats have now surpassed terrorism 
as the most significant National security threat to the United States. I am not yet 


® Rosen, Armin, “ISIS is Bragging about its ‘Brazen’ Attack on Mosul in its English Language 
Magazine.” Business Insider (June 10, 2014). http: 1 1 www.businessinsider.com I isis-is-bragging- 
in-its-english-language-magazine-2014-6. 

Frank J. Cilluffo and Sharon L. Cardash, “It’s the Ideology, Stupid,” The National Interest 
(June 3, 2013), http:! ! nationalinterest.org ! commentary lit%E2%80%99s-the-ideology-stupid- 
8537. 

^http:] / www.lawfareblog.com 1 2014 / 06 1 the-foreign-policy-essay-it-is-time-to-furul-domestic- 
counter-radicalization. 
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prepared to agree with such an assessment, for all of the reasons discussed in the 
previous section; and would argue instead that it is not an either/or proposition — 
that we must be prepared to defend against both types of threats. But it is undoubt- 
edly true that the cyber threats to U.S. National security and economic interests 
have significantly advanced in recent years, and taken on new dimensions, particu- 
larly in the area of cyber threats to critical infrastructure. 

The cyber and physical threats to critical infrastructure have been a key focus of 
Executive Branch policy making in the past 2 years, through activities mandated 
by Executive Order 13636 and Presidential Policy Directive 21. These threats are 
also highlighted in the draft QHSR report, which discusses how cyber-physical con- 
vergence and interdependence has “changed the risks to critical infrastructure in 
sectors ranging from energy and transportation to agriculture and health care.” 
Vulnerabilities in these sectors could give rise to catastrophic outcomes, especially 
if cascading effects ensue as a result of interdependencies between and among crit- 
ical sectors. The physical attack last year on the PG&E Metcalf substation is an ex- 
ample of this convergence and interdependence of threats; if that attack had been 
slightly more damaging, it could have had a severe impact on the power grid in Sil- 
icon Valley. 

DHS plays a critical role in addressing and mitigating these cyber threats, work- 
ing with other Federal, State, and local government partners on threats to govern- 
ment networks, and of equal importance, forming strong partnerships with the pri- 
vate sector. These public-private partnerships are critical given that the predomi- 
nant share of the relevant cyber infrastructure and expertise is located within the 
private sector — in Silicon Valley, and in our key economic sectors, including defense, 
energy, finance, and telecommunications. DHS has made significant progress in 
building its relationships with the private sector on cybersecurity in recent years, 
particularly with respect to its incident response activities at the National Cyberse- 
curity & Communications Integration Center (NCCIC) and Industrial Control Sys- 
tems Cyber Emergency Response Team (ICS-CERT). But it still needs to improve, 
particularly with respect to its analytic activities on cyber threats and risks. Cur- 
rently responsibility for cyber analysis is split between the DHS Office of Intel- 
ligence and Analysis (I&A), and the National Protection and Programs Directorate. 
These two parts of DHS need to become better synchronized in their analytic efforts 
and work together to best support critical infrastructure stakeholders in the private 
sector. 


FINAL THOUGHTS AND RECOMMENDATIONS 

The QHSR is an important deliberative process for the Department of Homeland 
Security. Unless we define our priorities clearly and fund them accordingly, we will 
not be optimizing our efforts to address these critical threats to the homeland. 

But such a review cannot simply be an exercise that takes place every 4 years; 
the threats that we face are evolving too rapidly for such widely-spaced reviews. In- 
stead, this process of review and assessment needs to be fully embedded into the 
day-to-day decision-making processes of the Department. One proposal that would 
promote this is the establishment of an Office of Net Assessment (ONA) within 
DHS, similar to the office of the same name at the Department of Defense. The 
ONA would produce comprehensive long-term analysis of future homeland threats 
and the capabilities needed to meet those threats. I would urge this committee to 
consider establishing the ONA in law, building on the existing capabilities of the 
Office of Strategy, Planning, Analysis, and Risk within the DHS Office of Policy. 
This is not a new idea, but rather one that Congressman Lee Hamilton and I first 
put forward back in January 2007, in the Homeland Security Advisory Council 
(HSAC) Report of The Future of Terrorism Task Force.® 

In closing and as detailed above, I would recommend the following actions for 
your consideration: 

• The ultimate value of the QHSR will be determined by the influence that it has 
on budgets, plans, and operational requirements. This committee can use its 
oversight function to determine whether this is being done. Otherwise, policies 
such as the QHSR are merely empty rhetoric. 

• Introduce and work to pass a set of DHS authorization bills. This is a challenge 
given the fragmented structure of Congressional oversight of DHS, but is worth 
pursuing, and can be done in piece-meal manner to reduce the complications 
caused by this jurisdictional situation. In particular, the committee can author- 
ize the headquarters elements of the Department and update core DHS authori- 
ties in the Homeland Security Act. Legislation can also be moved to authorize 


Report available at: http:/ 1 www.dhs.gov/xlibrary I assets/ hsac-future-terrorism-010107.pdf. 
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other components of DHS, such as Customs and Border Protection, as Chair- 
man McCaul has recently proposed. 

• To support DHS authorization, the committee should work with the Depart- 
ment to strengthen the annual Future Years Homeland Security Program 
(FYHSP) reports required currently in the Homeland Security Act, so that they 
can be used as a critical source of information for authorization legislation, 
along the lines of the role played by the Future Years Defense Program (FYDP) 
reports for annual defense authorization legislation. 

• As part of authorization legislation, establish the DHS Office of Policy in law, 
to be led by an under secretary for policy. This idea was originally proposed by 
Secretary Chertoff nearly 9 years ago, but has stalled because of resistance by 
Congressional committees that have secondary jurisdiction over parts of DHS. 
It is time to elevate and strengthen the Office of Policy by the finally estab- 
lishing it in law, a step that will also give Congress greater influence over its 
priorities and functions. 

• Establish an Office of Net Assessment (ONA) within DHS to provide the Sec- 
retary with comprehensive analysis of future threats and U.S. capabilities to 
meet those threats. 

• Prioritize the challenge posed by foreign fighters, particularly those fighting in 
Syria and Iraq. In part this means maintaining and strengthening key DHS ac- 
tivities related to terrorist travel, even in this difficult budget environment. It 
also means placing greater priority and increasing funding for programs and ac- 
tivities intended to counter violent Islamist extremism. 

• Better synchronize I&A and NPPD in terms of their cyber analytic activities 
and private-sector stakeholder outreach. 

Thank you again for the opportunity to testify before you today. I look forward 
to trying to answer any questions that you may have. 

Mr. Duncan. Thank you for that. Very refreshing. I think you 
are right. The acquisition bill gives us at least some oversight and 
gives us some leverage. One thing I will say about Chairman 
McCaul, with the authorization bill that where we finally authorize 
the Department, I think is the right thing to do, as well. So I thank 
you for that. 

The Chairman will now recognize Dr. Willis for 5 minutes. 

STATEMENT OF H ENRY H. WILLIS, DIRECTOR, RAND HOME- 
LAND SECURITY AND DEFENSE CENTER, THE RAND COR- 
PORATION 

Mr. Willis. Thank you. Chairman Duncan, Ranking Member 
Barber, and Members of the subcommittee. Thank you for inviting 
me to testify at this hearing. 

Yesterday, the Department of Homeland Security released the 
second Quadrennial Homeland Security Review. Converging trends 
of the evolving threats, increasingly constrained budgets and new 
leadership make now an opportune time for DHS to prioritize the 
Department’s goals and ensure its programs are best aligned to 
meet them. 

Today, I will highlight three important ways Congress and DHS 
could work together to build on the results of this second quadren- 
nial review. First, align DHS budgets with Department strategic 
guidance. Second, establish more effective oversight of DHS pro- 
grams. Third, seek ways to improve the effectiveness and efficiency 
of the DHS by leveraging Department of Defense capabilities. 

Regarding my first point, aligning budgets with strategic guid- 
ance and risk management will make the Department more effec- 
tive. The analysis behind the Quadrennial Homeland Security Re- 
view provides a basis for reasoned discussion of risk management 
priorities. Secretary Johnson has proposed new initiatives that 
could build on this progress. 
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Specifically, in a memorandum to DHS leadership, Security 
Johnson proposed three initiatives: A Department leadership 
forum. Departmental management processes to review and imple- 
ment joint requirements and oversight, an enhancement of head- 
quarters strategy for planning and analysis capahilities. I encour- 
age Congress to consider supporting each of these initiatives. 

Second, establishing effective oversight of programs will make 
the Department more efficient. Several GAO studies point out 
cases where effectiveness of DHS is either poor or undocumented, 
costs are uncontrolled, or oversight is lacking. While the Depart- 
ment continues to remedy these situations, there remains plenty of 
room for improvement. 

For example, a Rand paper published last year included a num- 
ber of recommendations that could improve acquisition at DHS, in- 
cluding ensuring every major acquisition program has an approved 
acquisition program baseline document; not delegating decision- 
making authority for components until key planning requirements 
are met; conducting careful analysis of cost or schedule breaches to 
improve further acquisitions; and establishing more professional 
development opportunities for DHS acquisition officials. 

Congress has already helped DHS with these types of problems, 
through passing the H.R. 4228, and can continue to help DHS im- 
prove oversight by reinforcing and funding initiatives that allow 
DHS headquarters to implement recommendations like these. 

Finally, the homeland security enterprise will be stronger if DHS 
seeks ways to improve effectiveness and efficiency by leveraging 
DOD capabilities. The department of — many of the priorities iden- 
tified in the Quadrennial Homeland Security Review require a 
whole-of-Government approach. Disaster management, border secu- 
rity, cybersecurity are just a few examples. The Department of De- 
fense has also recognized the importance of these missions and the 
opportunity for collaboration. 

For example, defending the homeland was identified as the first 
pillar of National security in the 2014 Quadrennial Defense Re- 
view. There are many ways DOD capabilities may be used to sup- 
port DHS missions. Examples include leveraging DOD technology 
demonstrations, learning from DOD experiences with cloud com- 
puting, and using DOD technologies to improve land, air, and mari- 
time demand awareness. 

However, before implementing any of these or other solutions. 
Congress, DHS, and DOD should together ensure that the full ac- 
quisition and sustainment costs are known. That any transfer of 
technology has been coordinated with existing DHS acquisition 
strategies. That the use of DOD capabilities reflects the desired use 
of the military and civilian missions. That it is clear which organi- 
zations should bear the costs of these technologies and that, then, 
budgets reflect that. 

In closing, we all certainly want more effective protection from 
terrorism, better preparedness for disasters, and more resilient 
communities. The multiplicity and complexity of current homeland 
security threats, uncertainty surrounding what new threats could 
emerge or how known threats might evolve, and constraints in 
budget make it difficult to achieve these goals. 
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However, if DHS is to overcome these challenges three things are 
required. Strategy focus to direct resources where they are most 
needed, strong oversight to assure that resources are used effec- 
tively and, finally, cooperation across Government to improve effi- 
ciency. 

Again, Chairman Duncan and Ranking Member Barber and 
Members of the subcommittee, thank you for inviting me to testify 
before you today on this very important opportunity for DHS. 

[The prepared statement of Mr. Willis follows:] 

Prepared Statement of Henry H. Willis 1 2 
June 20, 2014 

Chairman Duncan, Ranking Member Barber, and Members of the subcommittee, 
thank you for inviting me to testify at this hearing. 

The Department of Homeland Security (DHS) will soon release its report on the 
second Quadrennial Homeland Security Review (QHSR). The convergence of several 
trends makes this an opportune moment for the Department to step back and assess 
what are the most pressing current and emerging homeland security challenges and 
decide how they should be addressed. Let me briefly mention five such trends: 

• First, onset of terrorism fatigue — When DHS celebrated its 10-year anniversary, 
some questioned whether law enforcement and domestic security operations had 
become too focused on terrorism at the cost of addressing other public safety 
issues such as drug violence, public health, or crime. 

• Second, persistence of terrorism as a real threat — The Boston Marathon bomb- 
ing reminded us that attacks can happen anywhere, anytime. Destabilization of 
governments that followed the Arab Spring raises the prospect of new safe ha- 
vens for terrorism emerging. The recent al-Qaeda summit held in April by Nasir 
al-Wuhayshi in Yemen demonstrates that al-Qaeda continues to pursue global 
jihad. 

• Third, increasing threats from natural disasters — The effects of Super Storm 
Sandy emphasized the consequences for coastal communities of the combined 
impacts of continued population growth and sea-level rise, and the need for in- 
corporating planning for community and infrastructure resilience into economic 
development. 

• Fourth, cyber threats outpacing cyber defense — Last month’s indictment of five 
officers in the Chinese People’s Liberation Army for stealing information from 
six U.S. firms, along with revelations of Operation Olympic Games, reveal the 
scope of cyber crime and potential for malicious cyber attacks against critical 
infrastructure. 

• Fifth, increasingly constrained Government budgets — Federal, State, local, and 
Tribal governments have fewer resources to address this expanding list of con- 
cerns. 

In short, when Secretary Johnson took the reins at DHS, he stepped into a deeply 
uncertain, utterly complex, and continuously dynamic environment with more con- 
straints on the resources at his disposal. These converging trends, combined with 
new leadership and new guidance expected to arise from the QHSR, make now an 
opportune time for DHS to prioritize the Departmen’s goals and assure its programs 
are best aligned to achieve them. 

The first QHSR brought DHS together to develop a collective list of all missions 
for components across the Department.^ Though comprehensive — the list spanned 


^The opinions and conclusions expressed in this testimony are the author’s alone and should 
not be interpreted as representing those of RAND or any of the sponsors of its research. This 
product is part of the RAND Corporation testimony series. RAND testimonies record testimony 
presented by RAND associates to Federal, State, or local legislative committees; Government- 
appointed commissions and panels; and private review and oversight bodies. The RAND Cor- 
poration is a non-profit research organization providing objective analysis and effective solutions 
that address the challenges facing the public and private sectors around the world. RAND’s pub- 
lications do not necessarily reflect the opinions of its research clients and sponsors. 

2This testimony is available for free download at http:! I www.rand.orgl pubs I testimonies! 
CT412.html. 

3 Quadrennial Homeland Security Review Report: A Strategic Framework for a Secure Home- 
land, Department of Homeland Security, February 2010. 
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issues of terrorism, border control, immigration, cyber space, disaster management, 
and governance — the first review did not set priorities. 

The second QHSR will now set the stage for improving both the effectiveness and 
efficiency of DHS. The review includes a strategic assessment of the current and 
emerging homeland security threats, focused analysis on selected priority topics, 
and guidance on management priorities for the Department. I’d like to highlight 
three important ways Congress and DHS could work together to build on the second 
QHSR: 

• First, improve the linkages between budgets of DHS’s component agencies and 
strategic directions of the Department as a whole on risk management; 

• Second, establish more effective oversight of programs once initiated; 

• Third, seek ways to improve effectiveness and efficiency by leveraging Depart- 
ment of Defense (DoD) capabilities, especially for Defense Support of Civilian 
Authorities. 

IMPROVE LINKAGES BETWEEN BUDGETS AND STRATEGIC DIRECTIONS ON RISK 

MANAGEMENT 

The Homeland Security Strategic Environment Assessment marks a significant 
accomplishment for DHS and reflects well the trends that are changing the home- 
land security landscape. The review covers persistent threats to the Nation from 
problems such as smuggling, illegal migration, and maritime safety. It also address- 
es catastrophic events such as hurricanes, earthquakes, pandemics, and terrorism. 
The strategic environment assessment describes all of these events in a common 
way, allowing for the first time an informed discussion of priorities based on risk. 

Knowing the facts about homeland security risks is important because the public’s 
fear of terrorism and disasters can be out of alignment with the risks the events 
pose. The unpredictability of terrorism, individuals’ uncertainty about how to pro- 
tect themselves, and the realization that attacks are purposeful and not random all 
contribute to increased fear about terrorism.^ As an example of how fear can affect 
behavior, John Allen Muhammad and Lee Boyd Malvo (the Beltway Snipers) para- 
lyzed communities and closed schools as the public and Government officials tried 
to understand what was happening and how to protect themselves. Fear of ter- 
rorism is further magnified by evocative images of suicide bombings that are re- 
played on TV and the internet. 

Fear of terrorism matters. Numerous studies — many supported by the DHS 
Science and Technology Directorate — demonstrate that even if other hazards threat- 
en the same number of lives or economic activity, people are more concerned about 
terrorism events than other events, support spending more for terrorism security, 
and are willing to cede more liberties in the name of terrorism security.® However, 
in reality, all terrorist events do not pose the same risks as other hazards. 

When assessed side-by-side, there are many disasters, accidents, and crimes that 
have historically threatened more lives, caused more economic damage, and led to 
more societal disruption than terrorism. When presented with this evidence, people 
with different and competing interests often can agree on what problems are most 
serious and make judgments that are consistent with what is known about risks.® 

The analysis behind the QHSR will provide a basis for this type of reasoned dis- 
cussion of risk management priorities. Secretary Johnson has proposed new initia- 
tives that will build on the current progress. Specifically, in a memorandum to DHS 
leadership in April, Secretary Johnson proposed three initiatives: 

• First, a Departmental Leadership Forum for the “most senior 
leadership ... to gather regularly ... in an environment of trust, and open- 
ly place on the table issues, arguments, and disagreements concerning [DHS’s] 
most challenging issues.” This forum could provide means for coordinated imple- 
mentation of leadership guidance and management initiatives. 

• Second, the establishment of Departmental management processes to review 
and implement processes to develop joint requirements for programs across 
DHS and improve oversight of programs once implemented. 


'I Cass R. Sunstein (2003). Terrorism and Probability Neglect. The Journal of Risk and Uncer- 
tainty 26:2/3 121-136. 

®For example see, W. J. Burns (2007) Risk Perception: A Review, CREATE Report, May 22, 
2007. 

® Russell Lundberg (2013) Comparing Homeland Security Risks Using a Deliberative Risk 
Ranking Methodology. RGSD— 319, RAND Corporation, Santa Monica, CA. 
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• Third, the enhancement of headquarters strategy, planning, and analytic capa- 
bility to build and maintain the organizations required to support the leader- 
ship and management initiatives being proposed^ 

I urge Congress to consider supporting each of these important initiatives. 

ESTABLISH EFFECTIVE OVERSIGHT OF PROGRAMS ONCE INITIATED 

DHS programs are notorious for lacking appropriate oversight. Several Govern- 
ment Accountability Office (GAO) studies point out cases where effectiveness of 
DHS programs is either poor or undocumented, costs are uncontrolled, or oversight 
is lacking. While the Department has made progress and continues to remedy these 
situations, plenty of room for improvement remains. 

A review by GAO in 2011 suggested that more than half of the 77 major acquisi- 
tions programs at DHS are over budget or behind schedule.® In July 2013, DHS re- 
ported that 63 percent of its acquisitions programs had cost growth, and one-third 
of these programs had cost growth over 10 percent.® 

A RAND paper published last year. Reducing the Cost and Risk of Major Acquisi- 
tions at the Department of Homeland Security, included a number of recommenda- 
tions that could be expected to improve acquisition management at DHS based on 
experience with acquisition management in other contexts. i® For example: 

• Every major acquisition program should have an approved acquisition program 
baseline document defining milestones and requirements to which programs are 
held accountable for demonstrating their readiness before progressing to new 
phases. 

• Decision-making authority, given to the DHS Office of Management, should not 
be delegated to components until key planning requirements are met. 

• Careful analysis of acquisition cost or schedule breaches should be conducted 
to help the Department identify root causes for these failures and incorporate 
lessons to improve future acquisitions. 

• The Department should establish mechanisms for more professional develop- 
ment opportunities for DHS acquisition officials. 

Congress can help DHS improve oversight by reinforcing and funding initiatives 
that allow DHS headquarters to implement recommendations like these. And in 
fact, this committee has already proposed legislation, H.R. 4228, the DHS Acquisi- 
tion Accountability and Efficiency Act, to improve acquisition management. Co- 
operation between Congress and DHS on improving oversight should continue. 

SEEK WAYS TO IMPROVE EFFECTIVENESS AND EFFICIENCY BY LEVERAGING DOD 

CAPABILITIES 

Many DHS priorities require a whole-of-Government approach. 

• Disaster management and pandemic preparedness to improve community resil- 
ience requires cooperation among FEMA, DHHS, DoD, HUD, local response or- 
ganizations, private firms, and NGOs. 

• Border security requires coordination of Federal and local law enforcement 
agencies across several bureaucratic and geographic jurisdictions to counter 
smuggling networks that span several continents. 

• Cybersecurity must protect Government and private systems from both State- 
sponsored and criminally-aligned threat networks, potentially using capabilities 
that exist in several departments, while balancing dynamic norms for privacy. 

At the same time DHS is deciding how best to address these challenges, the De- 
partment of Defense is scaling back use of its assets in theater operations (making 
them potentially available for other uses) and the Federal Government as a whole 
is wrestling with the realities of reduced budgets. The confluence of these events 
creates potential opportunities to identify ways to improve the effectiveness and effi- 
ciency of homeland security, especially in the areas of disaster management and 
border security. 

The Department of Defense has also recognized the importance of these missions 
and the opportunity for collaboration. Defending the homeland was identified as the 


"^Secretary Jeh Johnson (2014). Strengthening Departmental Unity. Memorandum for DHS 
Leadership, April 22, 2014. 

®GAO, Homeland Security: DHS Requires More Disciplined Investment Management to Help 
Meet Mission Needs, Washington, DC, GAO-12—833, September 18, 2012. 

® GAO, Homeland Security: Observations on DHS Oversight of Major Acquisitions and Efforts 
to Match Resources to Needs. GAO— 13-846T, September 10, 2013. 

Jeffrey A. Drezner and Andrew R. Morral (2013). Reducing the Cost and Risk of Major Ac- 
quisitions at the Department of Homeland Security. PE— 105, RAND Corporation, Santa Monica, 
CA. 
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first pillar of National security in the 2014 Quadrennial Defense Review. Defense 
Support for Civilian Authorities remains a critical responsibility. 

Motivated by this synergy, RAND studies have identified several opportunities 
worth consideration: 

• On-going DoD technology demonstration efforts could be leveraged to provide 
additional support to on-going DHS operations.^^ 

• Information sharing among local law enforcement and response agencies and 
Federal agencies could be improved using DoD lessons about how to design and 
operate cloud networks to improve both disaster management and border secu- 
rity. 

• Advanced Navy platforms and surveillance technologies could improve maritime 
domain awareness for counter-narcotic operations. 

These are just a few of the many ways DoD capabilities might be used to support 
DHS missions. However, before implementing any of them. Congress, DHS, and 
DoD should work together to: 

• Demonstrate how the new uses improve capability, and estimate the associated 
acquisition and sustainment costs. 

• Coordinate transfer and use of DoD systems with existing DHS acquisition 
strategies. 

• Ensure use of DoD capabilities for homeland security missions is consistent 
with existing legal authorities and policies and reflects the desired use of the 
military in civilian operations. 

• Review policies associated with using DoD capabilities for homeland security 
missions and address any policies that should be streamlined or reinforced. 

• Clarify which organizations should bear the costs of operating the technologies 
and adjust budgets accordingly. 

MAKING THE NATION SAFER AND MORE RESILIENT 

The second QHSR should reflect continued maturation of governance at DHS and 
provide a stepping-off point for further improvements. We all certainly want more 
effective protection from terrorism, better preparation for disasters, and more resil- 
ient communities. The multiplicity and complexity of current homeland security 
threats, uncertainty surrounding what new threats could emerge or how known 
trends might evolve, and constraints on budgets, make achieving these goals dif- 
ficult. If DHS is to overcome all of these challenges, three things will be required: 
Strategic focus to direct resources where they are most needed, strong oversight to 
assure that resources are used effectively, and finally, cooperation across Govern- 
ment to improve efficiency. 

Again, Chairman Duncan, Ranking Member Barber, and Members of the sub- 
committee, thank you for inviting me to testify before you today on this very impor- 
tant opportunity for DHS. I look forward to taking your questions. 

Mr. Duncan. Thank you, Dr. Willis. 

The Chairman will now recognize Ms. Duke for 5 minutes. 

STATEMENT OF ELAINE C. DUKE, FORMER UNDER SEC- 
RETARY FOR MANAGEMENT, U.S. DEPARTMENT OF HOME- 
LAND SECURITY 

Ms. Duke. Good morning, Chairman Duncan, Ranking Member 
Barber, and Members of the committee. I appreciate being here, 
and thank you for your efforts in overseeing the Department with 
the goal of improving mission effectiveness. To my fellow panel 
members, who have already covered most of the key points of the 
hearing this morning. 


Daniel Gonzales, Sarah Harting, Jason Mastbaum, Carolyn Wong (2104). Improving Inter- 
agency Information Sharing Using Technology Demonstrations: The Legal Basis for Using New 
Sensor Technologies for Counterdrug Operations Along the U.S. Border. RR-551— OSD, RAND 
Corporation, Santa Monica, CA. 

Isaac R. Porche III, Bradley Wilson, Erin-Elizabeth Johnson, Shane Tierney, Evan 
Saltzman (2104). Data Flood Helping the Navy Address the Rising Tide of Sensor Information. 
RR— 315— NAVY, RAND Corporation, Santa Monica, CA. 

Scott Savitz, Irv Blickstein, Peter Buryk, et al. (2014). U.S. Navy Employment Options for 
Unmanned Surface Vehicles. RR-384— NAVY, RAND (Corporation, Santa Monica, CA. 
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I do agree with both of you in your opening statements that the 
improvement of the management of DHS is key and essential to de- 
livering the Quadrennial Homeland Security Review mission stats. 
I do support H.R. 4228 and its effects to improve management. I 
would like to state that in addition to being bipartisan, it also, in 
a large part, is policy-agnostic. It will succeed despite policy 
changes and changes in the threat environment. So to do this is 
really an investment of our future of homeland security. 

In the statements announcing this hearing, the Chairman men- 
tioned that DHS must prioritize and make trade-offs on how to 
best keep us safe. Having a focused and affordable and achievable 
strategy is critical to reining in DHS’s massive bureaucracy. I 
would like to focus my comments this morning on the piece of that 
statement about being achievable. I do believe that the efforts we 
have talked about here in terms of building the management and 
the operational infrastructure is essential to achieving this QHSR 
and future policy and strategy initiatives. 

In setting up the legislation to require the QHSR, the lawmakers 
recognized this. They mandated that the QHSR include an assess- 
ment of the organizational alignment of the Department with the 
National homeland security strategy and mission areas. That is 
really where the challenge lies. The management infrastructure, 
including the right people with the right policy, processes, alloca- 
tion of resources and systems under united leadership, empowered 
with the data and analytics to make sound operational decisions. 
One sentence, a lot of work and a lot of effort. 

This is necessary, though — however, to transform the QHSR 
from a policy document into the living reality actually used to more 
effectively deliver the homeland security mission to our Nation. 

In the first years of DHS, we put the building blocks of manage- 
ment into place. Those building blocks included developing a budg- 
et process, developing a program and analysis PA&E capability, de- 
veloping an acquisition system, logistics, and human capital. The 
challenge to achieving the QHSR mission objectives is to first con- 
tinuing maturing those building blocks that were initially put in 
place during the first years of the Department. More importantly, 
integrating those building blocks into a system. 

The integrated model has to have policy- and strategy-informing 
capabilities, which will be followed by requirements driving into 
programming and budgeting, acquisition, and life-cycle manage- 
ment of the individual programs in the entire mission. Strategy has 
to be analytical, integrated, focused, and collaborative. 

I would like to point out, as Dr. Willis did, that Secretary John- 
son’s strengthening Department Unity of Effort memo dated April 
22, 2014 outlines a strategy to accomplish this. That memo is 
packed with processes not only for policy, but for management, that 
I believe, if executed, would be key to further maturing the Depart- 
ment in the areas of management and supporting the policy of the 
QHSR. 

Several key tenets are in that memo. One is the senior leader- 
ship engagement, not only at the headquarters level but with the 
component, on a regular both strategic and tactical basis. That is 
essential to driving forward the Unity of Effort memo and accom- 
plishing the QHSR. 
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Second, the system must recognize the interfaces and inter- 
dependencies of the individual pieces of the management system 
from policy through execution and sustainment, as I said earlier. 
The imperative for a sound system also includes having the inter- 
dependencies of mission, as the QHSR shows. 

Moving forward to more of a risk-based approach must ensure 
that both the policy and the execution of the policies are inter- 
related and show those dependencies that, as we move towards a 
risk-based approach, we actually recognize the risk appropriately. 
It is critical that this initiative be carried through by the Depart- 
ment and sustained so that we can deliver that mission set to our 
country. The framework will continue to drive the Department to- 
wards maturity. Otherwise, the QHSR cannot be achieved effec- 
tively and efficiently, and it does become just another policy docu- 
ment on the shelf. 

I thank the committee for this opportunity and look forward to 
your questions. 

[The prepared statement of Dr. Duke follows:] 

Prepared Statement of Elaine C. Duke 

Chairman Duncan, Ranking Member Barber, and Members of the subcommittee, 
thank you for inviting me to testify this morning. Though I retired from Federal 
service, I still have a passion for the homeland security mission, and remain com- 
mitted to the success of the Department of Homeland Security (DHS). I thank you 
for your efforts in overseeing the Department with the goal of improving mission 
effectiveness. 

DHS completed its first Quadrennial Homeland Security Review (QHSR) in 2010. 
Soon, it will issue the second QHSR, legislatively mandated by Section 707 of the 
Homeland Security Act of 2002, as amended. It is important that the QSHR be 
sound in terms of strategy and missions. Based on my experience with the first 
QHSR, DHS is spending considerable planning effort on updating the strategy and 
missions. It is updating the five basic homeland security missions: 

• Prevent Terrorism and Enhance Security, 

• Secure and Manage Our Borders, 

• Enforce and Administer our Immigration Laws, 

• Safeguard and Secure Cyberspace, 

• Strengthen National Preparedness and Resilience, 

and ensuring the Department has the right mission set and strategy. I am certain 
my colleagues on this panel will provide that policy stakeholder perspective. 

However with my background and experience, most recently as the DHS under 
secretary for management. I’d like to provide the execution perspective, on behalf 
of the stakeholders responsible for developing the management infrastructure that 
turns the strategy and policy of the QHSR into successful mission operations. 

Therefore, I am focusing my comments today on that lesser discussed, but in my 
opinion an equally or more important aspect, of the QHSR. The Chairman, in his 
comments announcing this hearing stated that “DHS must prioritize and make 
tradeoffs on how best to keep us safe. Having a focused, affordable, and achievable 
strategy is critical to reining in DHS’s massive bureaucracy.” Mr. Duncan’s point 
that the strategy must be achievable is the critical issue, in my opinion. And the 
strategy is only achievable if DHS continues to build the management and oper- 
ational infrastructure to execute it effectively and efficiently. 

Lawmakers recognized that fact when legislating that DHS must complete a 
Quadrennial Homeland Security Review. They mandated that the QHSR include an 
assessment of the organizational alignment of the Department with the National 
homeland security strategy and mission areas. 

The QHSR is to include recommendations not only regarding the long-term strat- 
egy and priorities of the Nation for homeland security, but also guidance on the pro- 
grams, assets, capabilities, budget, policies, and authorities of the Department. It 
must review and assess the effectiveness of the mechanisms of the Department for 
executing the process of turning the requirements developed in the Quadrennial 
Homeland Security Review into an acquisition strategy and expenditure plan within 
the Department. Additionally, it is to identify the budget plan required to provide 
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sufficient resources to successfully execute the full range of missions called for in 
the review. 

This is where the challenges lie. The management infrastructure, including the 
right policy, people, process, allocation of resources, and systems; under united lead- 
ership empowered with the data and analytics to make sound operational decisions. 
This is necessary to transform the QHSR from a document to a living reality, actu- 
ally used to more effectively deliver homeland security to our Nation. 

In the first 10 years of DHS, we put building blocks of the management structure 
into place to enable DHS to deliver the homeland security strategy and mission. 
Those building blocks included a budget process, program analysis and evaluation, 
acquisition, logistics, and human capital. The challenge to successfully achieving the 
QHSR is to continue maturing those building blocks. And even more importantly, 
integrating the building blocks into a system. In an integrated model, policy and 
strategy inform capabilities, followed by requirements, driving into the program- 
ming and budgeting processes, and acquisition and life-cycle management. Strategy 
must be anal 3 dical and integrated, focused, and collaborative. The strategic guidance 
must drive a joint capabilities-based analysis that identifies gaps and overlaps, ana- 
lyzes alternatives to close those gaps and eliminate the overlaps, and develops re- 
quirements to fill them. And to ensure the capabilities are effectively delivered, 
there must be coordinated operational planning with scenarios against the DHS 
strategy. All aspects of the system must be driven by the most senior DHS leader- 
ship at both headquarters and the operating components, and executed with opti- 
mum unity. And it must be continually monitored against goals to ensure stated ob- 
jectives are met. 

DHS Secretary Johnson’s direction to continue maturing this system is set for in 
his “Strengthening Departmental Unity of Effort” memo dated April 22, 3014. This 
memo outlines the further development of DHS planning, management, and oper- 
ations to deliver the DHS missions enumerated in the QHSR. It describes an inte- 
grated model designed to ensure that strategic and analytically-based decisions opti- 
mize mission performance. 

Several key tenants of the Secretary’s Unity of Effort are critical to successful im- 
plementation of the QHSR. The establishment of regular meetings and engagement 
by the Secretary, deputy secretary, and operating component head leaders is critical 
to the Unity initiative. It must provide unified leadership that results in the opti- 
mum allocation of resources, while improving the management process for planning 
and investments. It must develop planning, programs, budgets, acquisition, that are 
currently effective, and also sustainable throughout the life cycle of the program and 
mission. 

This system must recognize interfaces and interdependencies and be based on 
good data and sound anal 3 dics. That will position DHS headquarters and operating 
component leadership to make the right decisions to execute the QHSR missions 
and strategies. DHS must have the infrastructure in place, then it can execute the 
evolving homeland security mission to be updated in the QHSR; it can achieve the 
strategy. 

The imperative for a unified, sound system is even stronger as DHS moves away 
from a one-size-fits-all security approach to a risk-based security model. A risk- 
based approach to security must be intelligence driven with complete situational 
awareness from integrated data. This requires Unity of Effort. The ability to per- 
form effective case management and data-driven risk analysis is essential to the 
risk-based appraoch, and that data must be timely and accurate, and part of a uni- 
fied effort. 

It is critical that once the QHSR is finalized, the initiative to strengthen delivery 
of the mission set is continued. The framework outlined in the memo must be 
brought to maturity. Otherwise, the QHSR cannot be achieved effectively and be- 
comes just another policy document in the library. 

Again I thank the committee for this opportunity, and look forward to answering 
your questions today. 

Mr. Duncan. I want to thank you for that, and thank you for all 
the opening statements. 

I will now recognize myself for 5 minutes for questions. Before 
I get started, I just want to give sort of a shout-out to one of my 
staff members who has helped this committee as a shared em- 
ployee. Rebecca Ulrich will get her master’s degree today from the 
Naval War College. We are proud of her and she has helped the 
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committee on both sides. We thank her for her hard work and con- 
gratulate her for her master’s degree. 

I come from the private sector, and in business we did a 5-year 
plan. I think that is important to set focus for the company, to 
steer the ship in a certain direction and try to put pieces in place 
to make your vision and your goals. So whether it is sales goals or 
performance goals or income goals, return on investment issues to 
make those happen. So I hope this plan isn’t just eyewash for 
America. I hope it is not done just to meet a requirement of the 
United States Congress. I hope it is actually a vision for the De- 
partment going forward. 

I think that is the intent of Congress when they passed this, is 
to make DHS actually stop and focus on: What are the strategic 
threats to this country, where do we need to place our resources, 
where do we need to spend our money, and what do we need to do 
to ensure America is safe? So I hope that that is what has taken 
place. 

I do want to point out that in the strategic priorities for home- 
land security it says this: “Continue to evolve immigration policies 
and processes in order to respond to new trends in illegal migration 
and further align our enforcement policies with our goal of sound 
law enforcement practice that prioritizes public safety.” 

In case you haven’t noticed, we have a crisis situation on our 
Southern Border today. Regardless of how you feel about immigra- 
tion reform in this country, you cannot sit idly by and watch this 
blatant invasion of our Southern Border and our rule of law by 
folks that are illegal crossing this country. 

Chain migration is a real thing. If the children enter this coun- 
try, what happens with their families? Do they also come at a later 
day? I am concerned that we have CBP officers changing diapers 
and warming formula for these children. This is a humanitarian 
crisis, and I am very sympathetic to the humanitarian aspect of 
this. 

But I am also very cognizant of the fact that OTMs — other than 
Mexicans — a DHS term that says anyone other than a Mexico or 
nationality person that crosses in this country is an OTM. These 
are Guatemalans and El Salvadorians and Hondurans. I get that. 
But I am worried about the Asian, the Middle Eastern, and the Af- 
rican folks that are coming into this country and could possibly 
cross our Southern Border while we have CBP officers warming 
formula. What would they come here for? Would they come here to 
seek a job? Possibly. 

But we see what is going on in North Africa, and we talked 
about the foreign fighters in Syria. I am concerned that there are 
real threats that could possibly exploit this situation and enter my 
country, the sovereign Nation of the United States of America 
across our Southern Border because we are looking somewhere 
else, and we are dealing with something else. 

I am going to let my blood pressure calm down for just a second. 
Think about the world that we are living in today. We have got our 
border situation I just talked about. We have got Iraq and ISIS. We 
have got Syria and foreign fighters. We talked about foreign fight- 
ers a minute ago, and I appreciate that. 
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We went overseas to actually look at this issue. While we were 
there, a foreign fighter came from Syria, came from the battlefield. 
He was European, he was battle-hardened, he was radicalized. He 
came to Belgium and he shot up a Jewish museum where four or 
five people were killed, while we were there. The French got lucky 
and caught him at a bus stop. 

He was in an open border Schengen area. With a visa waiver 
program, could that European nationality have flown into the 
United States? Because he didn’t have to go to the consulate or the 
embassy to get a visa. He could have gotten on an airplane. If he 
wasn’t on a terrorist watch list or a no-fly list, guess what? He flies 
into the United States of America to do what? This is a real issue 
with foreign fighters that are getting battle-hardened in Syria and 
now Iraq. 

We have got Iran continually to pursue a nuclear weapons pro- 
gram, Russia, the Crimea and Ukraine, Hezbollah, Hamas, what 
we see with the kidnapping of Israeli children by the Palestinian 
folks. 

We see Boko Haram in Libya and North Africa. What is going 
on in Egypt and the Sinai. China, the South China Sea, threat- 
ening Japan. Cybersecurity. China, Russia, North Korea. I could go 
on and on and on. There are a lot of problems going on in the 
world. That is why I think it is so important that DHS has a very, 
very, very clear message and plan in this report. So I will ask the 
witnesses a question. 

Frank, the QHSR, by statute, is supposed to not only be a com- 
prehensive examination of the homeland security strategy of the 
Nation. It is also supposed to include recommendations regarding 
the long-term strategy and priorities of the Nation for homeland se- 
curity. Part of long-term strategic planning requires anticipating 
future threats and events. So I ask you this: Is planning for unseen 
changes in the Western Hemisphere, such as in Mexico or Central 
America resulting in mass migration an issue that should be ad- 
dressed in a National strategy? Was this issue adequately ad- 
dressed in the newly-released QHSR? 

Mr. CiLLUFFO. Mr. Chairman, I think you do hit an important 
question. At the end of the day, smuggling is smuggling is smug- 
gling is smuggling; whether it is drugs, whether it is people, 
whether it is weapons they are gonna use the same route. So this 
is a significant area for the Department. I don’t think it was ad- 
dressed in as much detail as the threat warrants. Because at the 
end of the day, you are looking at the convergence of cartels meet- 
ing up with other actors. Obviously, that is a primary concern for 
not only border security but, as you mentioned, some of the P&R 
issues. The terror travel issues, more strategically where CBP, 
ICE, VISIT, TSA, and others play a significant role. 

I do think that the Department has made yeoman’s progress in 
some of the terror travel-related issues. But to your point, it doesn’t 
have to be via air. It can come through any kind of mode that the 
adversary chooses. 

So bottom line, I think that clearly that is a National security 
challenge. It is not just a — it does affect our National security, and 
something that warrants, I think, greater attention, going forward. 
Let me just underscore one thing. We can’t wait 4 years for strate- 



28 


gies. What we need to be able to do is identify what the goals are, 
what the objectives are in a long-term planning kind of sense. 

But you need a Department that is agile. I recommended an of- 
fice of net assessment, along the lines of what DOD has, to be able 
to align some of these efforts. That has played a significant role in 
protecting our country from a defense perspective. I think DHS 
would be well-served if it had something that was nimble, agile, 
and doesn’t have to wait 4 years to put together a strategy, when 
the world changes so dramatically overnight. So we need to get to 
where we have the long-term goals, but we also need to get out tac- 
tics that are much quicker and much more rapid. 

Mr. Duncan. I agree with you. I think it should be a very fluid 
process. I am concerned that — and I had this conversation with 
staff this morning — that DHS was created, brought 22 different 
components together. Have we created such a large agency — the 
third-largest in the Government — that it can’t respond in that fluid 
manner? Responding to crisis as they come up, or needs, shifting 
assets, as needed. So I appreciate your saying that. We are gonna 
have several rounds of questions, I hope. 

With this, I will yield back — I will yield over to Mr. Barber for 
5 minutes. 

Mr. Barber. Thank you, Mr. Chairman. It has been a very im- 
portant discussion, especially as we are talking about the ability of 
the Department to be quick in response to emerging risks and 
problems. The drug cartels are very nimble. Their strategies 
change by the day, by the hour, by the week depending upon what 
they see us doing and where they see weaknesses in our border se- 
curity structure. 

Mr. Baker, I would like to pursue this a little bit with you if I 
could. As you know, one of the QHSR strategic priorities is for the 
Department to adopt a risk segmentation approach to securing and 
managing the flows of people and goods into the United States. 
Last week, the House Committee on Homeland Security unani- 
mously approved an authorization bill for CBP. In that discussion, 
I offered an amendment which was adopted by the committee re- 
quiring the commissioner of CBP to, within 6 months, develop and 
implement credible ways to measure border security and its effec- 
tiveness and its use of resources and allocations. 

We have, for way too long, had a lack of credibility of the infor- 
mation provided by the Department as to how it is doing. We have 
actually provided billions of dollars over the life of this Depart- 
ment, and we have way too little accountability. 

Two years ago, the Department moved to adopt a risk-based 
strategy for securing the borders. When the GAO, at the request 
of the Ranking Member and myself, looked at that it found a plan 
that was absent goals, absent measurements, no way to determine 
progress. The people that I represent have incredible information 
about the risks and the changing strategies of the cartels. I call the 
cartels narcoterrorists because I think it is a much more apt de- 
scription of their goals and their practices. 

There is no doubt that we have made some improvements in se- 
curing the border. But I can tell you this. That where I live, the 
people I represent, they still are not safe in their homes, still don’t 
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feel that the Department has been quick enough. So how do we 
move in this direction? 

So, Mr. Baker, I want to ask you, as someone who has worked 
in the Department, what steps you believe the Department can 
take not just to talk about risk assessment and moving resources 
in accordance with that, but how it can actually affect that and 
begin to have better credibility with the stakeholders who live and 
work across the border? 

Mr. Baker. Thank you. Representative Barber. I am deeply fa- 
miliar with this. Since I left the Department, I have worked closely 
with ranchers in exactly that area; very remote areas, where they 
are at risk every day from smugglers of drugs or people. They 
genuinely feel under siege. The — coming up with a measurement or 
a single measurement for success on the border and achievement 
of secure borders I think is almost impossible to do. Partly because 
while we can get a general sense, it is almost impossible to turn 
any of those measures into something that is the be-all and end- 
all. 

If you ask people today how many — like if you ask Border Patrol 
Agents how many people crossed the border or how many got away, 
how many did you catch, they will give you a pretty good estimate. 
But if you started making their bonuses depend on achieving those 
numbers, you would not be able to rely on those numbers for very 
long. My concern is, many of these numbers are subject, and ought 
to be subject, to exercise of judgment. 

The other problem that we are seeing today is, you can have a 
breakdown overnight if conditions change. I am quite struck by the 
fact that the crisis that we are facing now on the border is, in 
many ways, almost exactly the same crisis that I saw when I 
showed up in 2005 when we had people that were called, other 
than Mexicans, showing up and saying please give me the permiso 
and show me the way to the bus station. Because there was no way 
to return them — you couldn’t return them to Mexico because Mex- 
ico wouldn’t take them — and we did not have enough beds to put 
them into detention before they could be deported, we had to re- 
lease them. 

Everybody was coming in greater and greater numbers when 
they realized that the worst thing that would happen to them is 
they would be given a date to show up, in 6 months, for a hearing. 
That is happening again. I think it would be worthwhile to look at 
the response that the Department took to that problem in 2005 and 
2006, when we dramatically increased our ability to put people into 
detention and shrank, dramatically, the time it took to send them 
back home. So that they started to deliver the message, oh, you can 
take that long trip across Mexico but you will be back here in 2 
weeks once you cross the border. 

If they believe that they will be allowed to stay in the United 
States indefinitely they will keep coming, and we will spend all our 
time just rounding them up and giving them permisos. Meanwhile, 
the drug cartels have already realized if they can send 250 people 
across the border who all have to be fingerprinted and sent to de- 
tention, as soon as the Border Patrol is engaged in that they can 
begin sending their backpackers across with the drugs. 
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So I think this is a genuine crisis. It is a crisis of planning and 
management for the Department that needs to be addressed quite 
promptly or we will have serious, serious problems on the border. 

Mr. Barber. Thank you, Mr. Baker. Mr. Chairman, I have run 
out of time. I will yield back, and hope for questions in the second 
round. 

Thank you. 

Mr. Duncan. I thank the gentleman from Arizona. Mr. Baker, 
thank you for that, as well. Just a side comment. I think Mexico 
needs to be appealed to by this administration. It is their Southern 
Border with Guatemala that these folks are transiting, as well. 
They could be stopped there. Historically, Mexico has had a very, 
very strong policy of border crossings right there. But apparently, 
something — somewhere along the way something is not being done. 
Whether it is on the Guatemala and Mexico border, or whether it 
is on our border. 

So I yield to the gentleman, for 5 minutes, from North Carolina, 
Mr. Hudson. 

Mr. Hudson. Thanks, Mr. Chairman. Thank all the witnesses for 
your time here today. I thank the Chairman for having this hear- 
ing. This is really important. 

Mr. Baker, I want to start with you. In your written testimony, 
you addressed the delay of the QHSR by the Department of Justice 
and the near-veto power that Justice enjoys over this Department 
of Homeland Security product. In your time as assistant secretary 
for policy, did DOJ or any other Federal department enjoy this type 
of veto power? Are there any other departments — like Justice or 
Defense or State — that have to obtain this kind of outside approval 
before they present their quadrennial report? 

Mr. Baker. If you let other agencies do that to you they will do 
it. When I first arrived at the — and we were standing up the De- 
partment’s policy office, I handed out buttons that had the words 
“lunch money” and a big bar through it like a no-parking sign to 
say we were not gonna giving our lunch money to other depart- 
ments anymore. Maybe we should revive that. The Justice Depart- 
ment’s effort to extract turf concessions from a document that 
needs to be released I think does not — what — it is not in the best 
traditions of the Department. But you have to resist or other de- 
partments will do that to you. 

Mr. Hudson. I appreciate that. I am just very concerned about 
that type of process, and I think there needs to be an independent 
report. Obviously, you know, departments can work together on 
issues and concern and cross-jurisdiction. But to have a report like 
this delayed, and to have another Department with near-veto 
power, I think that is a real mistake. So I appreciate 

Mr. Baker. If I could tell one quick story? We had a very similar 
exercise like this when we were talking about nuclear terrorism. 
Where the FBI said, hey, we are in charge, we will do everything. 
Shortly thereafter we actually had an incident where a ship was 
coming with a cargo that had alarmed for plutonium. It turns out 
that it was not plutonium, but we thought seriously we had to send 
a helicopter out to investigate. We turned to the FBI and said, well, 
you said you were in charge. You got helicopters. They said, you 
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know, actually we don’t know how to land a helicopter on a ship. 
Could the Coast Guard do it for us? 

That is the difference between writing the speech where you say 
I am in charge, and actually carrying out the effort. Where the peo- 
ple who can do it end up with the responsibility. We need — the 
more we focus on what we are actually doing as opposed to the 
speech parts of this, the more likely we will have realistic assign- 
ments of responsibility. 

Mr. Hudson. Well, I think that is important. Because the Amer- 
ican people expect us to keep them safe. If we are fighting over turf 
and, you know, whose helicopter are we gonna use, you know, that 
is a mistake. I think the American people have a right to be out- 
raged and certainly, we have concerns here in Congress. We will 
continue to work on these issues. So I appreciate you highlighting 
that. 

Shifting gears a little bit, Mr. Cilluffo, at the time of the last 
QHSR, ISIS was a weakened al-Qaeda affiliate in Iraq. It has since 
become a major force, first in the on-going Syrian conflict and, 
more recently, in Iraq where it has taken on several key areas and 
is directly fighting with the government. 

Sort-of building on the theme that the Chairman raised, you 
know, did the QHSR mention this type of threat? If not, is ISIS a 
potential failure of the state of Iraq, and are other nation-states a 
potential threat that DHS or QHSR should include in a National 
homeland security strategy? 

Mr. Cilluffo. That is — I think that is an excellent question. It 
comes to what I think is one of these interagency challenges and 
dilemmas. Because you can’t look at this as a home game or an 
away game alone. I would argue that we have neglected some our 
away game activities in recent years. Which has provided the time 
and space for our enemies to exploit. But I would also argue that 
you have got to look at it as being inextricably interwoven. Here 
is where I think you have some of that breakdown. 

I think the Department does deserve credit in terms of the work 
it has done vis-a-vis terror travel. They have actually made signifi- 
cant progress. But as the Chairman had mentioned, you have also 
got foreign fighters by the thousands. In addition to the incident 
in Belgium, there was a big arrest yesterday with TATP in France 
where you do have a — and Syria connection. You do have a number 
of foreign fighters that can come to Europe and then go elsewhere. 
I mean, obviously, when you look at the highest concern in terms 
of threat, it is probably on European soil right now. 

But that also does bode significantly for the United States. The 
reason we did — we have done a number of studies on foreign fight- 
ers in 2009, 2010. The reason we did that was this particular case 
where the system was blinking very red in the United States. A fel- 
low by the name of Najibullah Zazi, he had initially went over to 
Afghanistan to join up with the Taliban. He was intercepted by al- 
Qaeda, said you are of much greater value because you are familiar 
with the United States, you can move in the United States. We are 
gonna turn you around and you are gonna start targeting U.S. tar- 
gets. 

In this case, he was going after the subways in New York. We 
had a couple of mix-ups in terms of being able to get there before 
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the balloon went up, but we did and we did it successfully. So it 
is this foreign fighter. It is these individuals that can be identified, 
intercepted, and turned around. That is a big problem. When you 
look at ISIS today, I think what is most unique is that you have 
got young folks who are meeting who had never met before. So 
when we looked at AQAP in Yemen, they are largely people who 
had familiarity with Yemeni society. 

When you look at Somalia, it was largely American, first-, sec- 
ond-generation of Somali descent. When you looked at AfPak, same 
sort of situation, southeast Asian. What makes this different is, 
they are coming from everywhere. These are new networks. So you 
have got very significant, concerning bomb skills coming out of 
Yemen, for example, now meeting with others who are savvy in so- 
cial media or other terrorist tactics that we need to be concerned 
about. 

So bottom line, I don’t think we will ever be able to predict the 
future, since the end of the Cold War threat forecasting has made, 
is some cases, astrology look respectable. 

But I would also suggest that, in the words of Mark Twain, 
whereas history may not repeat itself it does tend to rhyme. I am 
not sure we are learning all of our lessons that we have learned 
the hard way. I think it is up to all of us to make sure that we 
try to push back as much as we can. 

Mr. Hudson. Very well put. 

Mr. Chairman, my time is expired so I will yield back to you. 

Mr. Duncan. I thank the gentleman from North Carolina. 

Talking about some of those issues, we just saw about 20 Soma- 
lians leave Minnesota to travel. Whether they are going to Syria 
or Somalia, but they are going to be jihadists. You know, do they 
come back to the country? These are folks that had legal perma- 
nent status here. 

So I apologize earlier if I came across as angry, talking about the 
Southern Border. But you know what? By golly, I am angry. I am 
angry because I am an American and I believe in the sovereignty 
of our Nation. I am very chagrined — more than chagrined, an- 
gered — by what I see going on right now. 

Ms. Duke, I want to shift gears to you. DHS is the third-largest 
Federal department, and they have got a vast mission. The Depart- 
ment has number of agencies, departments, directorates, offices, 
and programs. There are offices involved with the intelligence com- 
munity. Others conduct research and development within the Fed- 
eral Protective Service. They serve as uniform Federal building se- 
curity. We got CBP and ICE that strive to protect this Nation’s bor- 
der, among other missions. 

So given the size of DHS and its broad responsibility and it is 
vast and, at times, contradictory missions, is it appropriate to ex- 
pect a QHSR of approximately 100 pages to provide an accurate, 
comprehensive examination of the homeland security strategy for 
the Nation? 

Ms. Duke. Well, Mr. Chairman, I think when you use the term 
“comprehensive,” no. I think the QHSR really is a start document, 
setting forth the missions in very broad categories. I think they are 
noncontroversial in large part because they are so broad. It is a 
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motherhood and apple pie, I think everybody agrees. I think the 
key is gonna he moving that forward. 

I do think there is unity of mission. I think the mission set of 
the various components of DHS does overlap more than it is being 
executed today. Not completely. 

I think that moving forward in joint requirements and joint capa- 
bilities is key for two reasons. One is the efficiency, the dollars 
spent. Second is the effectiveness. I believe DHS was created to be 
a more effective deliverer of homeland security, and that integra- 
tion of the mission is key to moving that forward. I think we will 
see a better alignment if we move towards those joint requirements 
and capabilities. 

Mr. Duncan. Well, speaking along that, it is sort-of silent on 
management issues. So how concerned shall we be that it is sort- 
of silent on those issues, and what management infrastructure 
needs to be put in place to effectively implement a DHS strategy? 

Ms. Duke. It is 

Mr. Duncan. We talked about acquisition reform earlier, so we 
have covered that. But any other things. 

Ms. Duke. It is silent. I think No. 1 from a management is the 
unity of the leadership and the regular engagement of senior lead- 
ership, both at headquarters and the components, in running the 
Department. By running the Department, it is a 250,000-person 
bureaucracy, and it needs to be run effectively. I think that is key. 
That is a tenet through the senior leadership council and the depu- 
ties group of the current Secretary’s initiative. I think it is gonna 
be difficult to carry through on that because of schedules, but it 
has to happen. That will drive down the unity at a low level. 

The second is the joint requirements and capabilities, both from 
a technology perspective and moving towards less platforms, less 
technology. You know, how many airframes do we need, those type 
of issues. Then also moving towards joint operations. That is going 
to be difficult. It needs to be tackled, but you are not gonna get 
that without the unity of the leadership dedicated towards that 
joint-ness. 

Mr. Duncan. Right. Thank you for that. 

I want to ask Dr. Willis, in this current budgetary environment 
that we experience, we deal with every day up here on the Hill, 
what are some specific examples of how DHS could operate more 
efficiently with less? For example, are there any areas or compo- 
nents that could be reduced without threatening the homeland se- 
curity mission? 

Mr. Willis. I think the answer to this comes back to — picking up 
some of what Ms. Duke said — on joint-ness. We need to start look- 
ing at the different mission areas that the Department has to work 
on. Take them as a problem to be solved, not a component to do 
work. If we start looking at it that way, I think some of the places 
where there may be ways to improve, both effectiveness or in- 
creased efficiency could emerge. I think border security is one of 
those. 

We already have something like that for drug control. We have 
something called The Interdiction Committee, where ONDCP, 
Coast Guard and all — and others come together to figure out how 
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are we gonna jointly use our assets together? We could use some- 
thing like that on immigration, as well. 

Mr. Duncan. All right, thank you. 

Mr. Cilluffo, am I off-base when I talk about my concern over 
OTMs, people of Middle Eastern, Asian, African descent, transiting 
somehow to South America, Western Hemisphere and making their 
way across our Southern Border? I preface that by saying we saw 
the Quds Force operative called on the Southern Border, trying to 
come into this country using a Mexican drug cartel operative who 
happened to be a DEA agent. Trying to come across through some 
sort of drug nexus, cartel nexus, to come to this city to assassinate 
the ambassador from Saudi Arabia. 

That is a real example. But am I exacerbating that with a con- 
cern that foreign fighters may try to come, that Hezbollah is trying 
to come into the Western Hemisphere more, that Iran is continuing 
to send operatives into this hemisphere? That there is a possibility 
that with a porous border like with have that they could actually 
transit into the United States? Is this a concern we should have, 
or am I off-base? 

Mr. Cilluffo. You know, I actually testified on this issue before 
the subcommittee when Mr. McCaul was chairing it. I do feel that 
is a legitimate concern. Obviously, when you look at the numbers 
it is a small number business. But the reality is, is terrorism is a 
small numbers business. Small numbers can cause mass harm. So 
I do think it is a significant concern. I do think that our authorities 
at CBP and elsewhere are aware of this in DEA. But smuggling is 
smuggling. 

I don’t care what it is. If they are getting in, they are gonna get 
in. I used to tell a very bad joke. If you want to smuggle in a tac- 
tical nuclear weapon just wrap it in a bale of marijuana. Because 
we are not doing all that well in terms of some of our drug enforce- 
ment. Now I think it has improved. I think the likelihood would 
be a little more significant if you were to bring in someone that 
looks entirely different. I am not meaning to be pejorative, but that 
is the way it would work. 

I think some of the cartels wouldn’t necessarily risk bringing in 
someone if they have a sense that this is a real bad actor. But then 
again, you are assuming that this is a monolithic enterprise and 
it is not. It is decentralized. So I think the bottom line here is, is 
it is a concern. It is not a big numbers business. But again, small 
numbers can cause mass harm here, and I think that is what is 
important. 

Mr. Duncan. Yes. 

Mr. Cilluffo. If I could just underscore one thing. Because I do 
think the Department, and Secretary Johnson, in particular de- 
serve some credit for that Unity of Effort memo. That really was 
powerful. If you do get to the joint-ness, he came from the Depart- 
ment of Defense, where you had joint planning, where you have a 
structure between OSD and the combatant commanders through 
various means. The Department, I think at Homeland Security, 
you don’t really have a sense of what the office of the Secretary is. 

Elevate policy to an under secretary role. Get a joint operations 
planning kind of effort, a J-3 in the military sense. Get the under 
secretary for intelligence and analysis to be a true J-2 or an intel- 
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ligence function more along the lines of the way that relates to the 
under secretary of defense of intelligence in DOD. I think there are 
some opportunities. I think the Secretary seems to be moving in 
the right direction. Is it captured in the QHSR? Not really, but I 
think if you align those two entities there is some opportunity 
there. I think Congress can keep their feet to the fire to make that 
happen. 

Mr. Duncan. Thank you for that. I will say that Secretary John- 
son came and met with at least Republican Members of this com- 
mittee yesterday for at least an hour. He was very engaging, and 
I am impressed. I would say I am a Jeh Johnson fan, and I think 
he is the right guy at the right time. We need to make sure he has 
got the right tools and the ability to do his job, given the immense 
challenges, all the list of things that — and that was just a partial 
list that I read earlier. 

The last thing I will say before I turn it over to Mr. Barber is, 
I grew up in the Cold War, where we were nation-state versus na- 
tion-state. We were tracking tank and artillery movements and 
troop movements and posturing and positioning of troops. It is a 
different world today, where we are tracking individuals. If you 
think about that, we are trying to track single individuals who 
could commit an act of terror. 

Fly an airplane into a tower or commit a Boston-style bombing 
that still terrorizes this country and caused tremendous moral and 
morality and harm to this country. So it is a different world and 
the challenges are immense. When we talk about the foreign fight- 
ers and other things we have mentioned today, it really raises the 
hair on the back of my neck. 

So with that, I will turn it over to Mr. Barber for another line 
of questioning. 

Mr. Barber. Thank you again, Mr. Chairman. Let me talk a lit- 
tle bit about the morale issue. Because I think it is a central prob- 
lem that the Department is facing as it is trying to carry out its 
mission. It will be, I think, a real problem in implementing the 
QHSR. Secretary Johnson came to this committee and made it real 
clear that this was going to be one his priorities: To improve em- 
ployee morale. It is rightly a top priority for him. It is for us. 

Because improving employee morale means improving the effec- 
tiveness of the Department. A demoralized workforce cannot carry 
out a mission effectively. Let me be very specific about one area of 
concern that is very real to me and the people I represent. That 
is the work that is being done by the Border Patrol and the Cus- 
toms Agents at our ports of entry. 

The Border Patrol Agents, every single day, work in the most 
rugged environments on the border in the Southwest that you 
could imagine. Around the next bend, around the next canyon could 
be armed cartel members. We have had incidents, of course, where 
our agents have been harmed in those circumstances. They are 
very courageous people. I think they are really doing their best, 
under very difficult circumstances, to do their job. 

The Customs Agents who work at the ports of entry also face 
dangers and frustration because we have tourists, we have fresh 
produce trucks, we have products that are made in the United 
States, shipped to Mexico for assembly, and brought back that wait 
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in long lines — 2 V 2 hours is not unusual — at our ports of entry. That 
is also demoralizing — it has a demoralizing impact on those em- 
ployees. 

So I guess my question really is, for those of you were within the 
Department at one time — and, Dr. Willis, can you describe from 
your experience and from your base of knowledge, what is it the 
Department is going to have to do to increase morale, particularly 
in the area I have talked about? Because without improved morale, 
as the Secretary has made a priority, we are simply not gonna get 
a better Department. 

So let me start, if I could, with Dr. Willis, and then the other 
panelists perhaps can make their comments, as well. 

Mr. Willis. I think this is a very important problem. It is not 
just the component you called out. If you look across morale, across 
the Department, the numbers are not where you would like to see 
them. The basic approaches to this come out of basic management, 
right? We need to give people a clear focus on what we are gonna 
do, and then we need to give them the tools to do it. I saw some 
things in the acquisition bill that were helping that, providing 
workforce training. 

In the case of the Border Patrol that you were talking about, in 
addition to facing hostile threats there has also been news about 
concern about use of force guidance. So these are two in tension. 
So we need to give them the training in policies to help them be 
able to do their job effectively. So I think those two things are key, 
and then I will ask my other panelists to help. But 

Mr. Barber. Ms. Duke, could you respond? 

Ms. Duke. Yes. Well, up until the very end of my career I was 
a career civil servant. I will say, after spending a long time in the 
Department of Homeland Security they are some of the most pas- 
sionate civil servants that I have ever encountered in my 28-year 
career. I commend them. I thank you for asking questions about 
them. 

I think, first of all, that passion could be turned into better mo- 
rale, No. 1, by engagement. They have got to be engaged and val- 
ued. In terms of they know what needs to be done, and both their 
operations and their opinions and their vision has to be considered 
as we develop strategies. 

It cannot be top-down. It has to be bilateral in terms of those 
boots on the ground know what needs to happen. Combine that 
with the senior leadership perspective, and have an engaged work- 
force. 

I think second, in the Department of Homeland Security I think 
that civil servants — it is one of the few, if not the only Department 
where it is okay to criticize civil servants without merit in terms 
of just general their mission and their population. I think that 
leadership has to support their members and speak positively of 
them both internally and externally, where it is warranted. 

Make sure that the politics around homeland security are im- 
posed on those mid- and junior-level civil servants. That the poli- 
tics is managed by the politicians and the leadership in terms of 
supporting the day-to-day mission. That they are enabled and sup- 
ported and valued for accomplishing that mission despite the swirl 
around the political issues. 
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Mr. Barber. Before we go to other witnesses, I just want to com- 
ment on what you said, Ms. Duke. I absolutely believe that engag- 
ing the people who are on the ground is one of the most important 
things that any organization can do, not just the Department of 
Homeland Security. That simply is not happening to the degree it 
needs to. 

I think there is a fresh wind in the Department. The Secretary, 
I think, is really committed to improving morale, to transparency 
and accountability. He has already taken action that shows that he 
really means it. 

But let me just cite an example. It has been a while since I have 
talked about this, but it illustrates the point. When the SBInet 
project was launched several years ago, the contract with Boeing 
specifically prohibited agents on the ground from advising or com- 
menting on how this project would go forward. I can’t believe that 
that happened. It did, the project basically failed as a result, I 
think, of lack of input. I would also add, and reiterate what I said 
earlier, not just input from the agents and the Customs Agents on 
the ground, but also the people who live and work on the border. 

I get information from the ranchers, from the businesspeople, 
from the people in the cities that is, without doubt, some of the 
best information you could have about what is really going on. 

So I couldn’t agree with you more. Obviously, management has 
to lead. But it can’t lead unless it listens to the people it is leading. 
So Mr. Baker, Mr. Cilluffo, could you also comment on this issue, 
please? 

Mr. Baker. Sure. Clarity of mission and support for the mission 
is crucial. Knowing that what you are doing when you get up every 
day is something that is valued by the country and by your leader- 
ship is the critical start. Part of that is a responsibility of Ameri- 
cans. You know, the most likely Federal employee any American is 
going to interact with in his ordinary life is a DHS employee. It 
won’t surprise you that Americans are pretty quick to criticize and 
make it personal. 

Really, we should be a little bit better as human beings about 
recognizing that the people we are dealing with are carrying out 
an important mission, even if it occasionally inconveniences us at 
the border, in the airport. We should all thank them more often 
than we do. 

Finally, and this is a little odd and I will say it because it was 
my experience at DHS. Sometimes a key to improving morale is to 
identify the people who are not doing the job and get rid of them. 
Nothing makes the people who are doing the job feel more valued 
than the recognition by management that some people are not and 
actually disciplining or removing them from the workforce. It is a 
real drag on morale if you believe that you don’t actually have to 
do the job to keep the job. 

Mr. Cilluffo. Just very finally briefly, because I think it was 
covered exceedingly well by my fellow witnesses. But keep in mind, 
it is also part of the mission. They can never shut down. It is ex- 
hausting. We know, when you are dealing with law enforcement 
you know when you arrest someone and your prosecute someone. 
When you are overseas you kind of know when you have gained 
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territory. Their mission is disproving double negatives. They can 
never shut down. 

So you have got an exhaustion factor that I think plays in there. 
Because you only recognize when something goes wrong in terms 
of the Department’s mission. That is what we will all focus on. 

So do we need to improve our abilities to lessen the likelihood 
of things going wrong? Absolutely. But we need to also find ways 
to reward some of the good work that has been done. Part of that, 
I would suggest, it may be psychic income, it may be not in the 
same way we think, but visits. I don’t know. When I was at the 
White House, President Bush would sit down and meet with my 
staff, who were then at the NAG — what is now the headquarters 
of the Department of Homeland Security. 

I could be wrong, but I am not sure how many times the Presi- 
dent has visited DHS. Members of Congress can do more. Just go 
to the hall, start meeting with the folks. It sounds trivial, but it 
actually means a lot. 

Then ultimately, to your point, get to the boots on ground be- 
cause that is where the action is. I would argue State and local. 
Homeland security is not a Federal issue alone, it is really about 
enabling some of our partners at the State and local level. I think 
there is a lot that can be done there. 

So part of it is politics, and I don’t mean in a Republican or a 
Demo kind of sense. But there is the need to be able to know that 
the work they are doing is appreciated. There is the need to recog- 
nize that you only realize when something goes wrong that we can 
maybe try to get out there when we do have some successes along 
those lines. Get out there, kick the tires. 

Mr. Barber. Well, thank you. 

Mr. Chairman, let me just close with this comment. I couldn’t 
agree more with all of you about what you say we need to do to 
improve morale. As simple as saying “thank you.” I have often 
traveled through some of our interior checkpoints because they are 
in my district. Without fail, I never identify myself. I say to the 
agent, “Thank you for your service.” They have this shocked look 
on their face. It is like no one ever says that. I mean, it is a tough 
job, and I think we need to be thankful. 

Also, we need to continue to reinforce what the Secretary is 
doing to improve accountability and transparency. When he came 
here and he said he was going to be more transparent, he followed 
through by releasing, for the first time, the use of force policy. Con- 
troversial decision, the right decision in my mind. 

He then released information about investigations involving 
agents. Again, controversial, but the right decision. The public has 
a right to know what is going on in this Department. The more it 
knows, I believe the more balanced it will be in praising the good 
things, of which there are many, and being clear about the things 
that don’t work. 

Thank you, Mr. Chairman. 

Mr. Duncan. I thank the gentleman. I want to thank you panel- 
ists for reminding us that it is a 24/7/365 day job to protect this 
country. It can be exhausting. I can only imagine what our CBP 
and Immigration and Customs Enforcement and USCIS and all the 
other groups that are dealing with some of the issues that we 
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talked about this morning are going through. So I want to just 
thank them for their service, on the record, here today. From Jeh 
Johnson all the way down to the guy that is standing at the border. 

And thank them. You know, Americans get frustrated when they 
go through the screening at the airport. I have been there. I will 
be there in a little while. I will look at the number of TSA agents, 
and wonder why things can’t go quicker. Why we can’t do things 
in a different manner. 

But I have got to temper my frustration, and understand that 
they are protecting this Nation, they are keeping me safe. I agree 
with Mr. Barber. I try to tell them, when I go through the airport, 
thank you for your service, thank you for what you are doing to 
keep us safe. 

I would encourage all Americans to remember that patience is 
the new sign of patriotism. Because we, as a Nation, need to be 
safe. 

So I want to thank the witnesses for their valuable testimony 
and the Members for their questions today. I thought it was very 
informative and insightful. The Members of the subcommittee may 
have some additional questions for the panelists, and we ask that 
you respond to those in writing. 

So without objection, the subcommittee will stand adjourned. 

[Whereupon, at 10:54 a.m., the subcommittee was adjourned.] 
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Questions From Chairman Jeff Duncan for Stewart A. Baker 

Question 1. What are the potential resource implications for the Department of 
Homeland Security from implanting priorities in the latest Quadrennial Homeland 
Security Review Report? 

Answer. Response was not received at the time of publication. 

Question 2. In an era of likely flat budgets, to what extent will the Department 
of Homeland Security need to reduce funding in some mission areas to free up re- 
sources to implement priority areas such as biological threats and cybersecurity? 

Answer. Response was not received at the time of publication. 

Questions From Ranking Member Bennie G. Thompson for Stewart A. Baker 

Question 1. Mr. Baker, policy has been organizationally challenged since the in- 
ception of DHS; in hindsight, what lessons or best practices do you have for manage- 
ment of the policy process and maturing the policy organization at the Department 
so that it ultimately produces actionable reports, guidance, and policy, as opposed 
to “think tank” policies and guidance? 

Answer. Response was not received at the time of publication. 

Question 2. The QHSR specifically tasks the Department with assessing its orga- 
nizational structure, including its “management systems, budget and accounting 
systems, human resources systems, procurement systems, physical and technical in- 
frastructure.” This was not included in the QHSR. Please expand on why you be- 
lieve the Department did not include these elements. Would doing so in a public 
document expose the country to risk? 

Answer. Response was not received at the time of publication. 

Question 3. The 9/11 Act requires the Department to conduct the QHSR every 4 
years, consistent with the Presidential election. During the preparation of the first 
QHSR, the Department was simultaneously going through the process of an admin- 
istration and political party change. This time, the administration and political 
party stayed the same. As a result, the Department has had an opportunity to pre- 
pare a QHSR during two different election outcomes. How could each outcome — new 
administration and party and same — affect the QHSR process and should Congress 
reconsider the timing to the QHSR so that it does not occur during the same year 
as the Presidential election? 

Answer. Response was not received at the time of publication. 

Question 4. The purpose of the QHSR is to inform the budget. How could the De- 
partment mature the QHSR process so it will bear some relationship to the budget 
request? 

Answer. Response was not received at the time of publication. 

Question 5. When examining the statutory requirements for what should be in- 
cluded in the QHSR, with the evolution of time and the changing homeland security 
environment, are these still the best requirements, in your opinion, or should there 
be any legislative additions or deletions to the requirements? 

Answer. Response was not received at the time of publication. 

Question 6. Many of the documents submitted to DHS by stakeholders were not 
made public. In your opinion could the process have been more open and trans- 
parent? 

Answer. Response was not received at the time of publication. 

Question 7. The Secretary’s Unity of Effort memo, in addition to the numerous 
cross-cutting strategies laid out in the QHSR, envisions a unified cohesive DHS; yet, 
its component agencies and high-level officials remain spread out in various offices 
across the National Capital Region. And yet, from some Members, there remains a 
lack of support for the consolidated headquarters at St. Elizabeths. How would a 
consolidated headquarters assist the Department in carr3dng out its mission? And 

( 41 ) 
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do you believe that consolidating DHS’s physical infrastructure supports the Sec- 
retary’s Unity of Effort? 

Answer. Response was not received at the time of publication. 

Questions From Chairman Jeff Duncan for Frank J. Cilluffo 

Question 1. To what extent did DHS provide a clear strategy for securing cyber- 
space in the QHSR? Did the QHSR provide an opportunity to guide a coordinated 
cybersecurity effort across Federal departments or did it remain a DHS-focused 
strategy? 

Answer. Response was not received at the time of publication. 

Question 2. Given the increasing prevalence of nation-state-supported cyber at- 
tacks and espionage, such as the recently indicted members of an elite Chinese mili- 
tary unit who targeted U.S. networks for the Chinese government, should the De- 
partments of State and/or Defense have more of a role in cyher protection? 

Answer. Response was not received at the time of publication. 

Questions From Ranking Member Bennie G. Thompson for Frank J. Cilluffo 

Question 1. The QHSR specifically tasks the Department with assessing its orga- 
nizational structure, including its “management systems, budget and accounting 
systems, human resources systems, procurement systems, physical and technical in- 
frastructure.” This was not included in the QHSR. Please expand on why you be- 
lieve the Department did not include these elements. Would doing so in a public 
document expose the country to risk? 

Answer. Response was not received at the time of publication. 

Question 2. The 9/11 Act requires the Department to conduct the QHSR every 4 
years, consistent with the Presidential election. During the preparation of the first 
QHSR, the Department was simultaneously going through the process of an admin- 
istration and political party change. This time, the administration and political 
party stayed the same. As a result, the Department has had an opportunity to pre- 
pare a QHSR during two different election outcomes. How could each outcome — new 
administration and party and same — affect the QHSR process and should Congress 
reconsider the timing to the QHSR so that it does not occur during the same year 
as the Presidential election? 

Answer. Response was not received at the time of publication. 

Question 3. The purpose of the QHSR is to inform the budget. How could the De- 
partment mature the QHSR process so it will bear some relationship to the budget 
request? 

Answer. Response was not received at the time of publication. 

Question 4. When examining the statutory requirements for what should be in- 
cluded in the QHSR, with the evolution of time and the changing homeland security 
environment, are these still the best requirements, in your opinion, or should there 
be any legislative additions or deletions to the requirements? 

Answer. Response was not received at the time of publication. 

Question 5. Many of the documents submitted to DHS by stakeholders were not 
made public. In your opinion could the process have been more open and trans- 
parent? 

Answer. Response was not received at the time of publication. 

Question 6. The Secretary’s Unity of Effort memo, in addition to the numerous 
cross-cutting strategies laid out in the QHSR envisions a unified cohesive DHS; yet, 
its component agencies and high-level officials remain spread out in various offices 
across the National Capital Region. And yet, from some Members, there remains a 
lack of support for the consolidated headquarters at St. Elizabeths. How would a 
consolidated headquarters assist the Department in carr 3 dng out its mission? And 
do you believe that consolidating DHS’s physical infrastructure supports the Sec- 
retary’s Unity of Effort? 

Answer. Response was not received at the time of publication. 
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Questions From Chairman Jeff Duncan for Henry H. Willis 

Question la. Components, such as TSA and CBP, are ultimately responsible for 
implementing DHS’s strategic plan. While the QHSR developed a strategic frame- 
work, it remains unclear to what extent these efforts are impacting specific pro- 
grams and operations at the component level. 

Do you know of any component-level programs or operations that have changed, 
or been cancelled or initiated as a result of the prior QHSR or the current QHSR? 

Question lb. To what extent have/will components adjust their own strategies to 
be in line with the QHSR? 

Answer. One of the results of the first QHSR was the recognition of the impor- 
tance of having a valid National risk assessment. The methods for National risk as- 
sessment developed through the first QHSR were then applied in this second QHSR. 
However, as I stated in my testimony, the next challenge for DHS is to connect the 
strate^c planning based on this assessment to decisions about budgets and program 
priorities. To this end, it is important that the Department complete the steps out- 
lined in the Secretary’s Unity of Effort memo that can implement budget processes 
and build the anal3d;ic capability that will allow components to adjust their own 
strategies and programs to be in line with the guidance in the second QHSR. 

Questions From Ranking Member Bennie G. Thompson for Henry H. Willis 

Question 1. The QHSR specifically tasks the Department with assessing its orga- 
nizational structure, including its “management systems, budget and accounting 
systems, human resources systems, procurement systems, physical and technical in- 
frastructure.” This was not included in the QHSR. Please expand on why you be- 
lieve the Department did not include these elements. Would doing so in a public 
document expose the country to risk? 

Answer. I am not aware of the reasons why the Department decided not to ad- 
dress issues related to management more explicitly or in greater detail. I do not be- 
lieve that doing so in a public document would have exposed the country to greater 
risk. 

Question 2. The 9/11 Act requires the Department to conduct the QHSR every 4 
years, consistent with the Presidential election. During the preparation of the first 
QHSR, the Department was simultaneously going through the process of an admin- 
istration and political party change. This time, the administration and political 
party stayed the same. As a result, the Department has had an opportunity to pre- 
pare a QHSR during two different election outcomes. How could each outcome — new 
administration and party and same — affect the QHSR process and should Congress 
reconsider the timing to the QHSR so that it does not occur during the same year 
as the Presidential election? 

Answer. As indicated in this question, both the first and second QHSRs were re- 
quired to be completed as new leadership stepped into DHS. This timing led to 
delays in the release of the reports and limited the utility of the reports to the De- 
partment leadership Congress as a tool for strategic planning and budgeting. The 
QHSR would be better timed if it were initiated when new leadership came aboard 
(rather than completed at that time) and was developed and released in coordina- 
tion with the President’s budget request, so that it could serve as strategic guidance 
for that request. 

Question 3. The purpose of the QHSR is to inform the budget. How could the De- 
partment mature the QHSR process so it will bear some relationship to the budget 
request? 

Answer. To reiterate a few points made in my written testimony and in the re- 
sponses to questions above, there are two steps that could be taken to mature the 
QHSR process so that it will bear a relationship to the budget request. First, the 
Secretary’s Unity of Effort memo identifies steps to implement budget processes and 
build analytic capability to connect budget decision making to the strategic guidance 
in the QHSR. Second, the QHSR would be a more effective strategic planning tool 


^The opinions and conclusions expressed in this testimony are the author’s alone and should 
not be interpreted as representing those of RAND or any of the sponsors of its research. This 
product is part of the RAND Corporation testimony series. RAND testimonies record testimony 
presented by RAND associates to Federal, State, or local legislative committees; Government- 
appointed commissions and panels; and private review and oversight bodies. The RAND Cor- 
poration is a non-profit research organization providing objective analysis and effective solutions 
that address the challenges facing the public and private sectors around the world. RAND’s pub- 
lications do not necessarily reflect the opinions of its research clients and sponsors. 

^This testimony is available for free download at http:! I www.rand.orgl pubs I testimonies! 
CT412zl.html. 
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if it were scheduled to be initiated when new leadership conies on board at the De- 
partment and it was developed and released in coordination with the budget re- 
quest. 

Question 4. When examining the statutory requirements for what should be in- 
cluded in the QHSR, with the evolution of time and the changing homeland security 
environment, are these still the best requirements, in your opinion, or should there 
be any legislative additions or deletions to the requirements? 

Answer. The statutory requirement for a QHSR reinforces the importance of stra- 
tegic planning for DHS and the stated requirements are appropriate for such a re- 
view and remain relevant. 

Question 5. Many of the documents submitted to DHS by stakeholders were not 
made public. In your opinion could the process have been more open and trans- 
parent? 

Answer. I am supportive of greater transparency for the analysis and information 
to support strategic planning for homeland security. Ultimately, the effectiveness of 
DHS at countering terrorism, managing risks from disasters, and facilitating trade 
and travel depends on the ability of State and local governments, private companies, 
and non-government organizations to contribute to making the Nation safer, more 
secure, and more prosperous. When these organizations have more information, they 
are in a better position to offer solutions. 

Question 6. The Secretary’s Unity of Effort memo, in addition to the numerous 
cross-cutting strategies laid out in the QHSR envisions a unified cohesive DHS; yet, 
its component agencies and high-level officials remain spread out in various offices 
across the National Capital Region. And yet, from some Members, there remains a 
lack of support for the consolidated headquarters at St. Elizabeths. How would a 
consolidated headquarters assist the Department in carr3dng out its mission? And 
do you believe that consolidating DHS’s physical infrastructure supports the Sec- 
retary’s Unity of Effort? 

Answer. As mentioned in my testimony, the Secretary’s Unity of Effort memo in- 
cludes several steps that can improve the effectiveness and efficiency of the Depart- 
ment. I believe that close cooperation between the Secretary and Congress will 
greatly improve DHS’s ability to implement these initiatives. I have not examined 
how consolidation of headquarters at St. Elizabeths would affect management of 
DHS. However, to the extent a convincing case can be made that a consolidated 
headquarters would improve management, it would deserve support by Congress. 

Questions From Honorable Jeff Duncan for Elaine C. Duke 

Question la. In your written testimony, you discuss the Secretary’s “Unity of Ef- 
fort” and the necessity of meetings and engagement by the Secretary, deputy sec- 
retary, and the component heads. 

After 11 years of a Department more resembling a collection of independent com- 
ponents, how critical is Unity of Effort in protecting the Nation’s homeland? 

Answer. The Unity of Effort is very critical to effectively executing the Depart- 
ment of Homeland Security’s (DHS) mission to protect the Nation’s homeland. The 
Unity of Effort will improve the effectiveness of mission operations. It will serve to 
close gaps in mission scope and delivery. It will position DHS to execute the mis- 
sions of the Quadrennial Homeland Security Review (QHSR) more seamlessly, with 
better communications, and with integrated roles and responsibilities. It will posi- 
tion DHS to better understand the touch points between the components’ unique 
missions and manage those integration points for better mission execution. 

Additionally, the Unity of Effort will improve the efficiency of DHS. It will drive 
efficient allocation of resources by eliminating redundancies in systems, services, 
and aligning missions. It will help position the business functions to more cohesively 
support mission execution in leadership, resource allocation, policy and governance, 
and performance measurement. 

Question lb. What are the challenges to focusing the various component efforts 
on a unified DHS strategy versus an individual component approach? 

Answer. The challenges to focusing the various component efforts on a unified 
DSH strategy versus an individual component approach start with trust. Each com- 
ponent is passionate about its mission, and fears that joining with the other compo- 
nents may hinder its ability to meet its mission. That is one reason why the leader- 
ship councils formed under the Unity of Effort are so crucial. Trust must start with 
the most senior leaders. An additional challenge to a unified strategy is developing 
an optimal balance between constancy and flexibility. DHS must develop a unified, 
constant infrastructure to be efficient and consistent in delivery services and mis- 
sion. Yet, it must maintain the flexibility to adapt to an evolving threat and be nim- 
ble and addressing the threats. 
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Questions From Ranking Member Bennie G. Thompson for Elaine C. Duke 

Question 1. Ms. Duke, a section on Maturing Management was not included in 
the 2009 QHSR. To some extent; however, it was included in the subsequent Bot- 
tom-up Review. The current QHSR likewise did not include the requisite assessment 
of the Department’s management functions. As you know, many aspects of the De- 
partment management functions remain on the Government Accountability Office 
High-Risk List and continue to pose a challenge for DHS. What should we, as Con- 
gress, look to for management issues from the QHSR since there will not be another 
Bottom-up Review? Should Congress consider mandating a “Bottom-up Review” 
process that could be released on a quarterly basis as a companion to the QHSR? 

Answer. I believe continued oversight on the implementation of the Unity of Effort 
would yield more positive maturation and integration of management functions than 
another Bottom-Up Review. DHS has matured to the level that it has a relatively 
comprehensive understanding of the “as is”, related to its missions and how they 
are accomplished. The next step to maturity is the optimal unity of both manage- 
ment and mission delivery. I stress optimal because either maximizing or mini- 
mizing unity will not serve DHS or our Nation well. Rather than another look at 
the relatively consistent mission set, I recommend concentrating continued oversight 
on development and implementation of the Unity of Effort initiatives set for by Sec- 
retary Johnson, since they will provide the sustained progress toward executing the 
QHSR missions. 

Question 2. The QHSR specifically tasks the Department with assessing its orga- 
nizational structure, including its “management systems, budget and accounting 
systems, human resources systems, procurement systems, physical and technical in- 
frastructure.” This was not included in the QHSR. Please expand on why you be- 
lieve the Department did not include these elements. Would doing so in a public 
document expose the country to risk? 

Answer. I do not know why DHS did not include the QHSR requirement to assess 
its organizational structure, including its “management systems, budget and ac- 
counting systems, human resources systems, procurement systems, physical and 
technical infrastructure” in the recent QHSR. DHS’s efforts to date regarding this 
segment of the QHSR requirement are discussed at least in part in part in its re- 
ports to the General Accountability Office related to its High-Risk report on Man- 
agement Integration. The management system is further defined in Secretary John- 
son’s Unity of Effort memo. The Unity of Effort, as proposed, will align mission and 
management into a more cohesive, integrated system. If executed, I believe it would 
improve our Nation’s homeland security. 

Question 3. The 9/11 Act requires the Department to conduct the QHSR every 4 
years, consistent with the Presidential election. During the preparation of the first 
QHSR, the Department was simultaneously going through the process of an admin- 
istration and political party change. This time, the administration and political 
party stayed the same. As a result, the Department has had an opportunity to pre- 
pare a QHSR during two different election outcomes. How could each outcome — new 
administration and party and same — affect the QHSR process and should Congress 
reconsider the timing to the QHSR so that it does not occur during the same year 
as the Presidential election? 

Answer. I believe that the majority of the DHS mission, at the strategic level, is 
not political. If you look at the mission sets in the recent QHSR, I think both new 
and old administrations and parties would believe they are the key missions, and 
the core of homeland security. There may be some political disparity when it comes 
to more detailed execution of those mission sets. Eor example, immigration enforce- 
ment, screening technologies and privacy implications, and border technology all 
may be executed differently depending on the administration and party in control 
of Congress. But I do think that there is danger in aligning DHS’s main mission 
set to political events. The need to protect the homeland is a continuous, fairly con- 
stant requirement. I suggest a potential way to move forward would be to allow the 
QHSR to stay strategic and relatively politically neutral, done every 4 years, to pro- 
vide the constancy of purpose to DHS. And then require a DHS strategic planning 
document, which provides more content on how those missions will be executed, at 
key events such as a new administration, or on a set periodic basis. 

Question 4. The purpose of the QHSR is to inform the budget. How could the De- 
partment mature the QHSR process so it will bear some relationship to the budget 
request? 

Answer. DHS could mature the QHSR so it would bear relationship to the budget 
request by including a section on the management of DHS, as currently required 
by the QSHR legislation. There is a danger in managing mission and management 
separately. Management only exists to enable mission, and mission can be most ef- 
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fectively delivered with good management. They are two pieces of a single puzzle, 
and setting a strategy for them individually sub-optimizes both. My recommenda- 
tion is that in a future QHSR or similar document, the two are addressed simulta- 
neously, with the mission outlining the “what” DHS will do, and the management 
section outlining the “how” DHS will do it, in terms of resource allocation (dollars 
and people), process, system, jointness, metrics, etc. I do believe the Secretary’s 
Unity of Effort plan does address the QHSR requirement on management, and 
would ultimately ensure resources are appropriately, effectively, and efficiently 
aligned to mission priorities. 

Question 5. When examining the statutory requirements for what should be in- 
cluded in the QHSR, with the evolution of time and the changing homeland security 
environment, are these still the best requirements, in your opinion, or should there 
be any legislative additions or deletions to the requirements? 

Answer. I think the current QHSR language is comprehensive and appropriately 
strategic. I do not think the language of the mandate needs to be modified, only the 
actual report needs to be regularly updated (as required every 4 years) to adapt to 
the changing homeland security environment and threats. 

Question 6. Many of the documents submitted to DHS by stakeholders were not 
made public. In your opinion could the process have been more open and trans- 
parent? 

Answer. I believe DHS, and any department, should have some ability to go 
through some level of deliberations within itself. This is necessary for open and hon- 
est communications in the deliberative process. One way the process could be more 
transparent, if that is necessary, is to include a summary discussion of some of the 
trade-offs and alternatives, as part of the final report supporting documentation. 
This provides an open and transparent look at alternatives and decisions that had 
to be made, while appropriately protecting the deliberative process. 

Question 7. The Secretary’s Unity of Effort memo, in addition to the numerous 
cross-cutting strategies laid out in the QHSR envisions a unified cohesive DHS; yet, 
its component agencies and high-level officials remain spread out in various offices 
across the National Capital Region. And yet, from some Members, there remains a 
lack of support for the consolidated headquarters at St. Elizabeths. How would a 
consolidated headquarters assist the Department in carr3dng out its mission? And 
do you believe that consolidating DHS’s physical infrastructure supports the Sec- 
retary’s Unity of Effort? 

Answer. The geographic dispersion of DHS’s components throughout the NCR 
does hinder the speed at which DHS can build its unity. The lack of consolidated 
headquarters is detrimental for several reasons, most importantly the fact that DHS 
does not have a joint operations center from which the Secretary can run incident 
response in conjunction with his component heads. The multiple, independent com- 
ponent operations centers fuel autonomous operations and hinders jointness. Addi- 
tionally, the lack of consolidated headquarters hinders DHS’s ability to build a uni- 
fied culture. Informal communications and professional relationship-building is dif- 
ficult, and without the personal connections, trust, understanding, and cohesiveness 
are more difficult to establish. I do understand the investment for St. Elizabeths is 
substantial, and know that in the current budget situation funding the head- 
quarters is of great concern for many parties. I think that the unity can be estab- 
lished with the current environment, but do think that it will take longer and may 
not be as complete of a unification as DHS would experience with a consolidated 
headquarters. 
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